Merge pull request 'fix(openclaw): remove --network=host, use bridge network' (#4) from franz-kafka/nixos-vps:fix/openclaw-network-isolation into main

Reviewed-on: ashie/nixos-vps#4

modules/openclaw-podman.nix

@@ -1,5 +1,5 @@
 # OpenClaw Podman Module
-# Provides: AI Agent with Discord integration running in a container
+# Provides: AI Agent with Discord integration running in an isolated container
 #
 # Usage:
 #   myModules.openclaw-podman = {
@@ -39,7 +39,7 @@ in
     # Enable podman
     myModules.podman.enable = true;
 
-    # OpenClaw container
+    # OpenClaw container (bridge network — isolated from host services)
     virtualisation.oci-containers.containers."openclaw" = {
       image = "ghcr.io/openclaw/openclaw:latest";
       ports = [ "127.0.0.1:${toString cfg.port}:8080" ];
@@ -50,9 +50,6 @@ in
         "${./openclaw-config.json}:/home/node/.openclaw/openclaw.json:ro"
         "openclaw-data:/home/node/.openclaw"
       ];
-      extraOptions = [
-        "--network=host"
-      ];
     };
   };
 }