@@ -15,38 +15,37 @@ This repo supports “remote over SSH” by keeping a single Gateway (the master
1515- The Gateway WebSocket binds to **loopback** on your configured port (defaults to 18789).
1616- For remote use, you forward that loopback port over SSH (or use a tailnet/VPN and tunnel less).
171718-## Common VPN/tailnet setups (where the agent lives)
18+## Common VPN and tailnet setups
191920-Think of the **Gateway host** as “where the agent lives.” It owns sessions, auth profiles, channels, and state.
21-Your laptop/desktop (and nodes) connect to that host.
20+Think of the **Gateway host** as where the agent lives. It owns sessions, auth profiles, channels, and state. Your laptop, desktop, and nodes connect to that host.
222123-### 1) Always-on Gateway in your tailnet (VPS or home server)
22+### Always-on Gateway in your tailnet
242325-Run the Gateway on a persistent host and reach it via **Tailscale** or SSH.
24+Run the Gateway on a persistent host (VPS or home server) and reach it via **Tailscale** or SSH.
26252726- **Best UX:** keep `gateway.bind: "loopback"` and use **Tailscale Serve** for the Control UI.
28-- **Fallback:** keep loopback + SSH tunnel from any machine that needs access.
27+- **Fallback:** keep loopback plus SSH tunnel from any machine that needs access.
2928- **Examples:** [exe.dev](/install/exe-dev) (easy VM) or [Hetzner](/install/hetzner) (production VPS).
302931-This is ideal when your laptop sleeps often but you want the agent always-on.
30+Ideal when your laptop sleeps often but you want the agent always-on.
323133-### 2) Home desktop runs the Gateway, laptop is remote control
32+### Home desktop runs the Gateway
34333534The laptop does **not** run the agent. It connects remotely:
363537-- Use the macOS app’s **Remote over SSH** mode (Settings → General → “OpenClaw runs”).
38-- The app opens and manages the tunnel, so WebChat + health checks “just work.”
36+- Use the macOS app's **Remote over SSH** mode (Settings → General → OpenClaw runs).
37+- The app opens and manages the tunnel, so WebChat and health checks just work.
39384039Runbook: [macOS remote access](/platforms/mac/remote).
414042-### 3) Laptop runs the Gateway, remote access from other machines
41+### Laptop runs the Gateway
43424443Keep the Gateway local but expose it safely:
45444645- SSH tunnel to the laptop from other machines, or
4746- Tailscale Serve the Control UI and keep the Gateway loopback-only.
484749-Guide: [Tailscale](/gateway/tailscale) and [Web overview](/web).
48+Guides: [Tailscale](/gateway/tailscale) and [Web overview](/web).
50495150## Command flow (what runs where)
5251@@ -77,9 +76,13 @@ With the tunnel up:
7776- `openclaw health` and `openclaw status --deep` now reach the remote gateway via `ws://127.0.0.1:18789`.
7877- `openclaw gateway status`, `openclaw gateway health`, `openclaw gateway probe`, and `openclaw gateway call` can also target the forwarded URL via `--url` when needed.
797880-Note: replace `18789` with your configured `gateway.port` (or `--port`/`OPENCLAW_GATEWAY_PORT`).
81-Note: when you pass `--url`, the CLI does not fall back to config or environment credentials.
82-Include `--token` or `--password` explicitly. Missing explicit credentials is an error.
79+<Note>
80+Replace `18789` with your configured `gateway.port` (or `--port` or `OPENCLAW_GATEWAY_PORT`).
81+</Note>
82+83+<Warning>
84+When you pass `--url`, the CLI does not fall back to config or environment credentials. Include `--token` or `--password` explicitly. Missing explicit credentials is an error.
85+</Warning>
83868487## CLI remote defaults
8588@@ -126,7 +129,7 @@ WebChat no longer uses a separate HTTP port. The SwiftUI chat UI connects direct
126129- Forward `18789` over SSH (see above), then connect clients to `ws://127.0.0.1:18789`.
127130- On macOS, prefer the app’s “Remote over SSH” mode, which manages the tunnel automatically.
128131129-## macOS app "Remote over SSH"
132+## macOS app Remote over SSH
130133131134The macOS menu bar app can drive the same setup end-to-end (remote status checks, WebChat, and Voice Wake forwarding).
132135@@ -222,7 +225,9 @@ launchctl bootstrap gui/$UID ~/Library/LaunchAgents/ai.openclaw.ssh-tunnel.plist
222225223226The tunnel will start automatically at login, restart on crash, and keep the forwarded port live.
224227225-Note: if you have a leftover `com.openclaw.ssh-tunnel` LaunchAgent from an older setup, unload and delete it.
228+<Note>
229+If you have a leftover `com.openclaw.ssh-tunnel` LaunchAgent from an older setup, unload and delete it.
230+</Note>
226231227232#### Troubleshooting
228233此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。