{
  "title": "Ansible Installation",
  "content": "The recommended way to deploy OpenClaw to production servers is via **[openclaw-ansible](https://github.com/openclaw/openclaw-ansible)** — an automated installer with security-first architecture.\n\n> **📦 Full guide: [github.com/openclaw/openclaw-ansible](https://github.com/openclaw/openclaw-ansible)**\n>\n> The openclaw-ansible repo is the source of truth for Ansible deployment. This page is a quick overview.\n\n* 🔒 **Firewall-first security**: UFW + Docker isolation (only SSH + Tailscale accessible)\n* 🔐 **Tailscale VPN**: Secure remote access without exposing services publicly\n* 🐳 **Docker**: Isolated sandbox containers, localhost-only bindings\n* 🛡️ **Defense in depth**: 4-layer security architecture\n* 🚀 **One-command setup**: Complete deployment in minutes\n* 🔧 **Systemd integration**: Auto-start on boot with hardening\n\n* **OS**: Debian 11+ or Ubuntu 20.04+\n* **Access**: Root or sudo privileges\n* **Network**: Internet connection for package installation\n* **Ansible**: 2.14+ (installed automatically by quick-start script)\n\n## What Gets Installed\n\nThe Ansible playbook installs and configures:\n\n1. **Tailscale** (mesh VPN for secure remote access)\n2. **UFW firewall** (SSH + Tailscale ports only)\n3. **Docker CE + Compose V2** (for agent sandboxes)\n4. **Node.js 22.x + pnpm** (runtime dependencies)\n5. **OpenClaw** (host-based, not containerized)\n6. **Systemd service** (auto-start with security hardening)\n\nNote: The gateway runs **directly on the host** (not in Docker), but agent sandboxes use Docker for isolation. See [Sandboxing](/gateway/sandboxing) for details.\n\n## Post-Install Setup\n\nAfter installation completes, switch to the openclaw user:\n\nThe post-install script will guide you through:\n\n1. **Onboarding wizard**: Configure OpenClaw settings\n2. **Provider login**: Connect WhatsApp/Telegram/Discord/Signal\n3. **Gateway testing**: Verify the installation\n4. **Tailscale setup**: Connect to your VPN mesh",
  "code_samples": [
    {
      "code": "> **📦 Full guide: [github.com/openclaw/openclaw-ansible](https://github.com/openclaw/openclaw-ansible)**\n>\n> The openclaw-ansible repo is the source of truth for Ansible deployment. This page is a quick overview.\n\n## What You Get\n\n* 🔒 **Firewall-first security**: UFW + Docker isolation (only SSH + Tailscale accessible)\n* 🔐 **Tailscale VPN**: Secure remote access without exposing services publicly\n* 🐳 **Docker**: Isolated sandbox containers, localhost-only bindings\n* 🛡️ **Defense in depth**: 4-layer security architecture\n* 🚀 **One-command setup**: Complete deployment in minutes\n* 🔧 **Systemd integration**: Auto-start on boot with hardening\n\n## Requirements\n\n* **OS**: Debian 11+ or Ubuntu 20.04+\n* **Access**: Root or sudo privileges\n* **Network**: Internet connection for package installation\n* **Ansible**: 2.14+ (installed automatically by quick-start script)\n\n## What Gets Installed\n\nThe Ansible playbook installs and configures:\n\n1. **Tailscale** (mesh VPN for secure remote access)\n2. **UFW firewall** (SSH + Tailscale ports only)\n3. **Docker CE + Compose V2** (for agent sandboxes)\n4. **Node.js 22.x + pnpm** (runtime dependencies)\n5. **OpenClaw** (host-based, not containerized)\n6. **Systemd service** (auto-start with security hardening)\n\nNote: The gateway runs **directly on the host** (not in Docker), but agent sandboxes use Docker for isolation. See [Sandboxing](/gateway/sandboxing) for details.\n\n## Post-Install Setup\n\nAfter installation completes, switch to the openclaw user:",
      "language": "unknown"
    },
    {
      "code": "The post-install script will guide you through:\n\n1. **Onboarding wizard**: Configure OpenClaw settings\n2. **Provider login**: Connect WhatsApp/Telegram/Discord/Signal\n3. **Gateway testing**: Verify the installation\n4. **Tailscale setup**: Connect to your VPN mesh\n\n### Quick commands",
      "language": "unknown"
    }
  ],
  "headings": [
    {
      "level": "h2",
      "text": "Quick Start",
      "id": "quick-start"
    },
    {
      "level": "h2",
      "text": "What You Get",
      "id": "what-you-get"
    },
    {
      "level": "h2",
      "text": "Requirements",
      "id": "requirements"
    },
    {
      "level": "h2",
      "text": "What Gets Installed",
      "id": "what-gets-installed"
    },
    {
      "level": "h2",
      "text": "Post-Install Setup",
      "id": "post-install-setup"
    },
    {
      "level": "h3",
      "text": "Quick commands",
      "id": "quick-commands"
    }
  ],
  "url": "llms-txt#ansible-installation",
  "links": []
}