fix connection conf for Chat of Openclaw UI, caddyfile, supervisord

Caddyfile

@@ -2,20 +2,60 @@
 
 # OpenClaw main UI under /openclaw/
 handle_path /openclaw/* {
-    reverse_proxy 127.0.0.1:18789
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
 }
 
 # OpenClaw UI uses absolute runtime paths; proxy them too.
 handle /ws* {
-    reverse_proxy 127.0.0.1:18789
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
 }
 
 handle /__openclaw__/* {
-    reverse_proxy 127.0.0.1:18789
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
 }
 
 handle /ask {
-    reverse_proxy 127.0.0.1:18789
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
+}
+
+handle /gateway* {
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
+}
+
+handle /events* {
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
+}
+
+handle /socket* {
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
+}
+
+handle /health {
+    reverse_proxy 127.0.0.1:18789 {
+        header_up Authorization "Bearer {$OPENCLAW_GATEWAY_TOKEN}"
+        header_up X-OpenClaw-Token "{$OPENCLAW_GATEWAY_TOKEN}"
+    }
 }
 
 handle {

Dockerfile

@@ -42,6 +42,7 @@ ENV OPENCLAW_DISABLE_MDNS=1
 ENV OPENCLAW_ONBOARD_NONINTERACTIVE=1
 ENV OPENCLAW_CUSTOM_BASE_URL=https://researchengineering-agi.hf.space/v1
 ENV OPENCLAW_CUSTOM_MODEL_ID=deepseek-chat
+ENV OPENCLAW_GATEWAY_BIND=0.0.0.0
 
 RUN mkdir -p /app/vault /app/.openclaw/state
 

app.py

@@ -616,13 +616,6 @@ with std_ui_embed_col:
     else:
         st.info("Standard UI proxy is not ready yet. Wait 10-30s and refresh.")
 
-st.markdown("**Gateway Token**")
-token_masked = f"{gateway_token[:4]}...{gateway_token[-4:]}" if gateway_token and len(gateway_token) > 8 else (gateway_token or "(not found)")
-st.code(token_masked)
-show_full_token = st.checkbox("Show full token (sensitive)", value=False)
-if show_full_token and gateway_token:
-    st.text_input("OPENCLAW_GATEWAY_TOKEN", value=gateway_token, type="password")
-
 st.divider()
 
 cfg_col, env_col = st.columns(2)

supervisord.conf

@@ -5,7 +5,7 @@ pidfile=/tmp/supervisord.pid
 user=root
 
 [program:openclaw]
-command=/bin/sh -lc "AUTH_FILE_MAIN=/app/.openclaw/state/agents/main/agent/auth-profiles.json; AUTH_FILE_DEV=/app/.openclaw/state/agents/dev/agent/auth-profiles.json; if [ \"${OPENCLAW_ONBOARD_NONINTERACTIVE:-1}\" = \"1\" ] && [ ! -s \"$AUTH_FILE_MAIN\" ] && [ ! -s \"$AUTH_FILE_DEV\" ]; then echo '[onboard] running non-interactive setup'; openclaw onboard --non-interactive --mode local --auth-choice custom-api-key --custom-base-url \"${OPENCLAW_CUSTOM_BASE_URL}\" --custom-model-id \"${OPENCLAW_CUSTOM_MODEL_ID}\" --gateway-port 18789 --gateway-bind loopback --skip-skills --accept-risk --secret-input-mode plaintext || true; fi; python /app/scripts/bootstrap_gateway_token.py; exec openclaw gateway run --port 18789 --allow-unconfigured --dev"
+command=/bin/sh -lc "AUTH_FILE_MAIN=/app/.openclaw/state/agents/main/agent/auth-profiles.json; AUTH_FILE_DEV=/app/.openclaw/state/agents/dev/agent/auth-profiles.json; GATEWAY_BIND=${OPENCLAW_GATEWAY_BIND:-0.0.0.0}; if [ \"${OPENCLAW_ONBOARD_NONINTERACTIVE:-1}\" = \"1\" ] && [ ! -s \"$AUTH_FILE_MAIN\" ] && [ ! -s \"$AUTH_FILE_DEV\" ]; then echo '[onboard] running non-interactive setup'; openclaw onboard --non-interactive --mode local --auth-choice custom-api-key --custom-base-url \"${OPENCLAW_CUSTOM_BASE_URL}\" --custom-model-id \"${OPENCLAW_CUSTOM_MODEL_ID}\" --gateway-port 18789 --gateway-bind \"$GATEWAY_BIND\" --skip-skills --accept-risk --secret-input-mode plaintext || true; fi; python /app/scripts/bootstrap_gateway_token.py; exec openclaw gateway run --port 18789 --bind \"$GATEWAY_BIND\" --allow-unconfigured --dev"
 autorestart=true
 startsecs=5
 startretries=20