Simford.Dong
Fix: revert to token auth to bypass device identity checks and allow URL access
3a39604
| FROM node:22-slim | |
| # Install system dependencies | |
| RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/* | |
| # Install OpenClaw globally | |
| RUN npm install -g openclaw@latest | |
| # Create config directory | |
| RUN mkdir -p /root/.openclaw | |
| # Set up environment for Hugging Face Spaces | |
| ENV PORT=7860 | |
| ENV OPENCLAW_GATEWAY_MODE=local | |
| ENV OPENCLAW_GATEWAY_PASSWORD=${SETUP_PASSWORD} | |
| # Expose the port (Hugging Face default) | |
| EXPOSE 7860 | |
| # Create a startup script that generates config and starts OpenClaw | |
| RUN echo '#!/bin/bash\n\ | |
| set -x\n\ | |
| \n\ | |
| # Check for required environment variables\n\ | |
| if [ -z "$GEMINI_API_KEY_1" ]; then\n\ | |
| echo "ERROR: GEMINI_API_KEY_1 is not set. Agent will fail. Exiting."\n\ | |
| exit 1\n\ | |
| fi\n\ | |
| \n\ | |
| # Create critical missing directories\n\ | |
| mkdir -p /root/.openclaw/agents/main/agent\n\ | |
| mkdir -p /root/.openclaw/agents/main/sessions\n\ | |
| mkdir -p /root/.openclaw/credentials\n\ | |
| \n\ | |
| # Remove auth-profiles.json if it exists to force env var usage\n\ | |
| rm -f /root/.openclaw/agents/main/agent/auth-profiles.json\n\ | |
| \n\ | |
| # Generate minimal config if not exists\n\ | |
| if [ ! -f /root/.openclaw/openclaw.json ]; then\n\ | |
| cat > /root/.openclaw/openclaw.json << EOF\n\ | |
| {\n\ | |
| "env": {\n\ | |
| "GOOGLE_API_KEY": "${GEMINI_API_KEY_1}",\n\ | |
| "GEMINI_API_KEY": "${GEMINI_API_KEY_1}",\n\ | |
| "GOOGLE_GENERATIVE_AI_API_KEY": "${GEMINI_API_KEY_1}",\n\ | |
| "PALM_API_KEY": "${GEMINI_API_KEY_1}"\n\ | |
| },\n\ | |
| "gateway": {\n\ | |
| "mode": "local",\n\ | |
| "bind": "lan",\n\ | |
| "port": 7860,\n\ | |
| "trustedProxies": ["0.0.0.0/0"],\n\ | |
| "auth": {\n\ | |
| "mode": "token",\n\ | |
| "token": "${SETUP_PASSWORD}"\n\ | |
| },\n\ | |
| "controlUi": {\n\ | |
| "allowInsecureAuth": true\n\ | |
| }\n\ | |
| },\n\ | |
| "agents": {\n\ | |
| "defaults": {\n\ | |
| "model": {\n\ | |
| "primary": "google/gemini-1.5-pro"\n\ | |
| }\n\ | |
| }\n\ | |
| }\n\ | |
| }\n\ | |
| EOF\n\ | |
| fi\n\ | |
| \n\ | |
| # Fix permissions\n\ | |
| chmod 700 /root/.openclaw\n\ | |
| chmod 600 /root/.openclaw/openclaw.json\n\ | |
| chmod 600 /root/.openclaw/agents/main/agent/auth-profiles.json\n\ | |
| \n\ | |
| # Fix config if needed\n\ | |
| openclaw doctor --fix\n\ | |
| \n\ | |
| # Start OpenClaw gateway\n\ | |
| echo "Starting OpenClaw gateway on port 7860..."\n\ | |
| exec openclaw gateway run --port 7860\n\ | |
| ' > /usr/local/bin/start-openclaw && chmod +x /usr/local/bin/start-openclaw | |
| CMD ["/usr/local/bin/start-openclaw"] | |