Update Dockerfile

Dockerfile

@@ -75,6 +75,7 @@ if __name__ == "__main__":\n\
 
 # 7. 容器入口脚本 (start-openclaw)
 # 负责恢复数据 -> 生成配置 -> 启动网关 -> 定时备份
+# 7. 容器入口脚本 (Updated for Gemini & Security Fix)
 RUN echo "#!/bin/bash\n\
 set -e\n\
 mkdir -p /root/.openclaw/sessions\n\
@@ -83,38 +84,37 @@ mkdir -p /root/.openclaw/workspace\n\
 # 启动前执行数据恢复\n\
 python3 /usr/local/bin/sync.py restore\n\
 \n\
-# 清理 API Base 地址\n\
-CLEAN_BASE=\$(echo \"\$OPENAI_API_BASE\" | sed \"s|/chat/completions||g\" | sed \"s|/v1/|/v1|g\" | sed \"s|/v1\$|/v1|g\")\n\
-\n\
 # 生成 openclaw.json 配置文件\n\
 cat > /root/.openclaw/openclaw.json <<EOF\n\
 {\n\
   \"models\": {\n\
     \"providers\": {\n\
-      \"siliconflow\": {\n\
-        \"baseUrl\": \"\$CLEAN_BASE\",\n\
-        \"apiKey\": \"\$OPENAI_API_KEY\",\n\
-        \"api\": \"openai-completions\",\n\
-        \"models\": [{ \"id\": \"\$MODEL\", \"name\": \"DeepSeek\", \"contextWindow\": 128000 }]\n\
+      \"google\": {\n\
+        \"apiKey\": \"\$GEMINI_API_KEY\",\n\
+        \"api\": \"google-generative-ai\",\n\
+        \"models\": [\n\
+          { \"id\": \"\$MODEL\", \"name\": \"Gemini Pro\", \"contextWindow\": 1000000 }\n\
+        ]\n\
       }\n\
     }\n\
   },\n\
-  \"agents\": { \"defaults\": { \"model\": { \"primary\": \"siliconflow/\$MODEL\" } } },\n\
+  \"agents\": { \"defaults\": { \"model\": { \"primary\": \"google/\$MODEL\" } } },\n\
   \"gateway\": {\n\
-    \"mode\": \"local\", \"bind\": \"lan\", \"port\": \$PORT,\n\
-    \"trustedProxies\": [\"0.0.0.0/0\", \"10.0.0.0/8\", \"172.16.0.0/12\", \"192.168.0.0/16\"],\n\
+    \"mode\": \"local\", \n\
+    \"bind\": \"loopback\", \n\
+    \"port\": \$PORT,\n\
+    \"trustedProxies\": [\"0.0.0.0/0\"],\n\
     \"auth\": { \"mode\": \"token\", \"token\": \"\$OPENCLAW_GATEWAY_PASSWORD\" },\n\
     \"controlUi\": { \"allowInsecureAuth\": true }\n\
   }\n\
 }\n\
 EOF\n\
 \n\
-# 启动定时备份进程 (每 3 小时执行一次，增强安全性)\n\
+# 启动定时备份进程\n\
 (while true; do sleep 10800; python3 /usr/local/bin/sync.py backup; done) &\n\
 \n\
-# 启动 OpenClaw 网关\n\
-openclaw doctor --fix\n\
-exec openclaw gateway run --port \$PORT\n\
+# 启动 OpenClaw 网关 (Force Loopback to skip security error)\n\
+exec openclaw gateway run --port \$PORT --bind 127.0.0.1\n\
 " > /usr/local/bin/start-openclaw && chmod +x /usr/local/bin/start-openclaw
 
 EXPOSE 7860