Use when self-hosting OpenClaw on a cloud server, hardening a remote OpenClaw gateway, choosing between SSH tunneling, Tailscale, or reverse-proxy exposure, or reviewing Podman, pairing, sandboxing, token auth, and tool-permission defaults for a secure personal deployment.
Detected risks:
The openclaw-secure-linux-cloud skill provides guidance for securely deploying and managing OpenClaw on Linux-based cloud servers. It addresses the challenge of safely exposing a remote OpenClaw gateway while minimizing potential security risks. By following a conservative "deploy first, expose later" approach, this skill ensures that users harden the host environment, maintain private access to the Control UI, and apply strict defaults for token authentication, pairing, sandboxing, and tool permissions. The skill is designed to prevent common misconfigurations such as binding the gateway to all interfaces or exposing critical ports to the public internet.
No, this skill is intended for Linux cloud hosting and remote deployment scenarios. For local single-machine onboarding, the official OpenClaw documentation is recommended.
It provides guidance on SSH tunneling, Tailscale, and reverse-proxy exposure, helping users decide which method is most secure for their deployment.
It is Linux-first and may require knowledge of the host's package manager and firewall configuration. Users should provide their Linux distro to receive accurate instructions.
The skill supports both fresh deployments and hardening reviews. For a fresh deploy, OpenClaw is not yet installed; for audits, the existing installation is reviewed for exposure and risky defaults.
By default, the skill recommends a hardened Linux host, rootless Podman, loopback-only gateway, private Control UI access through SSH tunnel, token authentication, enabled pairing, minimal tool set, and sandboxed sessions.
Quick Setup:
.claude/skills/Repository
xixu-me/skills