How to Set Up Tailscale with OpenClaw

# On macOS:
brew install tailscale

# On Ubuntu/Debian:
curl -fsSL https://tailscale.com/install.sh | sh

# On Docker host:
sudo curl -fsSL https://tailscale.com/install.sh | sh

sudo tailscale up

# Follow the link to authenticate
# Note your machine's Tailscale IP (e.g., 100.x.x.x)

# In docker-compose.yml:
services:
  openclaw:
    ports:
      - "100.64.0.1:3000:3000"  # Replace with YOUR Tailscale IP
    environment:
      - OPENCLAW_BIND_HOST=100.64.0.1  # Replace with YOUR IP

# Or if running directly:
export OPENCLAW_BIND_HOST=100.64.0.1
npm start

// In Tailscale admin console > Access Controls:
{
  "acls": [
    {
      "action": "accept",
      "src": ["group:team"],
      "dst": ["tag:openclaw:3000"]
    }
  ],
  "tagOwners": {
    "tag:openclaw": ["your-email@example.com"]
  }
}

# Enable MagicDNS in Tailscale admin console
# Then access OpenClaw via:
http://openclaw-host:3000

# Instead of:
http://100.64.0.1:3000

# On each device:
# macOS: brew install tailscale
# iOS/Android: Download Tailscale app
# Windows: Download from tailscale.com/download

# Then authenticate and connect

# From a Tailscale-connected device:
curl http://openclaw-host:3000/health

# From outside Tailscale network (should timeout):
curl http://YOUR_PUBLIC_IP:3000  # Should NOT work