{
  "title": "Provider login (run as openclaw user)",
  "content": "sudo -i -u openclaw\nopenclaw channels login\nbash theme={null}\nnmap -p- YOUR_SERVER_IP\nbash theme={null}",
  "code_samples": [
    {
      "code": "## Security Architecture\n\n### 4-Layer Defense\n\n1. **Firewall (UFW)**: Only SSH (22) + Tailscale (41641/udp) exposed publicly\n2. **VPN (Tailscale)**: Gateway accessible only via VPN mesh\n3. **Docker Isolation**: DOCKER-USER iptables chain prevents external port exposure\n4. **Systemd Hardening**: NoNewPrivileges, PrivateTmp, unprivileged user\n\n### Verification\n\nTest external attack surface:",
      "language": "unknown"
    },
    {
      "code": "Should show **only port 22** (SSH) open. All other services (gateway, Docker) are locked down.\n\n### Docker Availability\n\nDocker is installed for **agent sandboxes** (isolated tool execution), not for running the gateway itself. The gateway binds to localhost only and is accessible via Tailscale VPN.\n\nSee [Multi-Agent Sandbox & Tools](/multi-agent-sandbox-tools) for sandbox configuration.\n\n## Manual Installation\n\nIf you prefer manual control over the automation:",
      "language": "unknown"
    }
  ],
  "headings": [
    {
      "level": "h2",
      "text": "Security Architecture",
      "id": "security-architecture"
    },
    {
      "level": "h3",
      "text": "4-Layer Defense",
      "id": "4-layer-defense"
    },
    {
      "level": "h3",
      "text": "Verification",
      "id": "verification"
    },
    {
      "level": "h3",
      "text": "Docker Availability",
      "id": "docker-availability"
    },
    {
      "level": "h2",
      "text": "Manual Installation",
      "id": "manual-installation"
    }
  ],
  "url": "llms-txt#provider-login-(run-as-openclaw-user)",
  "links": []
}