forked from penal-colony/nixos-vps
No description
- Drops --network=host from OpenClaw container - Container now runs on Podman's default bridge network - Gateway port already mapped via ports config (127.0.0.1:18789:8080) - Container retains outbound internet access for Discord API, model providers, etc. - Cannot reach other host services (Forgejo, Vaultwarden, etc.) — principle of least privilege Note: If OpenClaw needs to reach local services in the future, add explicit extraOptions like --network=bridge or create a shared Podman network. |
||
|---|---|---|
| .claude | ||
| docs/superpowers | ||
| modules | ||
| secrets | ||
| .gitignore | ||
| .sops.yaml | ||
| braveapi.py | ||
| CLAUDE.md | ||
| configuration.nix | ||
| flake.lock | ||
| flake.nix | ||
| hardware-configuration.nix | ||
| LICENSE | ||