Franz Kafka
9092d6ec58
- Drops --network=host from OpenClaw container - Container now runs on Podman's default bridge network - Gateway port already mapped via ports config (127.0.0.1:18789:8080) - Container retains outbound internet access for Discord API, model providers, etc. - Cannot reach other host services (Forgejo, Vaultwarden, etc.) — principle of least privilege Note: If OpenClaw needs to reach local services in the future, add explicit extraOptions like --network=bridge or create a shared Podman network. |
||
|---|---|---|
| .. | ||
| adguard.nix | ||
| backup.nix | ||
| crowdsec.nix | ||
| default.nix | ||
| forgejo.nix | ||
| nginx.nix | ||
| openclaw-config.json | ||
| openclaw-podman.nix | ||
| podman.nix | ||
| searxng.nix | ||
| system.nix | ||
| vaultwarden.nix | ||