Merge pull request 'fix(openclaw): remove --network=host, use bridge network' (#4) from franz-kafka/nixos-vps:fix/openclaw-network-isolation into main

Reviewed-on: ashie/nixos-vps#4
This commit is contained in:
ashie 2026-03-19 20:19:49 +00:00
commit 17553dc5ee

View file

@ -1,5 +1,5 @@
# OpenClaw Podman Module # OpenClaw Podman Module
# Provides: AI Agent with Discord integration running in a container # Provides: AI Agent with Discord integration running in an isolated container
# #
# Usage: # Usage:
# myModules.openclaw-podman = { # myModules.openclaw-podman = {
@ -39,7 +39,7 @@ in
# Enable podman # Enable podman
myModules.podman.enable = true; myModules.podman.enable = true;
# OpenClaw container # OpenClaw container (bridge network — isolated from host services)
virtualisation.oci-containers.containers."openclaw" = { virtualisation.oci-containers.containers."openclaw" = {
image = "ghcr.io/openclaw/openclaw:latest"; image = "ghcr.io/openclaw/openclaw:latest";
ports = [ "127.0.0.1:${toString cfg.port}:8080" ]; ports = [ "127.0.0.1:${toString cfg.port}:8080" ];
@ -50,9 +50,6 @@ in
"${./openclaw-config.json}:/home/node/.openclaw/openclaw.json:ro" "${./openclaw-config.json}:/home/node/.openclaw/openclaw.json:ro"
"openclaw-data:/home/node/.openclaw" "openclaw-data:/home/node/.openclaw"
]; ];
extraOptions = [
"--network=host"
];
}; };
}; };
} }