How to Deploy OpenClaw on AWS EC2

aws ec2 run-instances \
  --image-id ami-0c55b159cbfafe1f0 \
  --instance-type t3.medium \
  --key-name your-key-pair \
  --security-group-ids sg-xxxxxxxxx \
  --block-device-mappings DeviceName=/dev/sda1,Ebs={VolumeSize=50,VolumeType=gp3}

# Recommended specs:
# t3.medium: 2 vCPU, 4GB RAM (~$30/mo)
# t3.large: 2 vCPU, 8GB RAM (~$60/mo)
# m5.large: 2 vCPU, 8GB RAM (~$95/mo)

aws ec2 authorize-security-group-ingress \
  --group-id sg-xxxxxxxxx \
  --protocol tcp --port 22 --cidr 203.0.113.0/24

aws ec2 authorize-security-group-ingress \
  --group-id sg-xxxxxxxxx \
  --protocol tcp --port 80 --cidr 0.0.0.0/0

aws ec2 authorize-security-group-ingress \
  --group-id sg-xxxxxxxxx \
  --protocol tcp --port 443 --cidr 0.0.0.0/0

aws ec2 allocate-address --domain vpc

aws ec2 associate-address \
  --instance-id i-xxxxxxxxx \
  --public-ip 203.0.113.50

ssh -i your-key.pem ubuntu@203.0.113.50

sudo apt update && sudo apt upgrade -y

curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
sudo apt install -y nodejs git curl

cd ~
git clone https://github.com/openclaw/openclaw.git
cd openclaw
npm install

cp .env.example .env
nano .env  # Add API keys

cp gateway.example.yaml gateway.yaml
nano gateway.yaml

sudo tee /etc/systemd/system/openclaw.service > /dev/null << EOF
[Unit]
Description=OpenClaw AI Agent
After=network.target

[Service]
Type=simple
User=ubuntu
WorkingDirectory=/home/ubuntu/openclaw
ExecStart=/usr/bin/npm start
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target
EOF

sudo systemctl daemon-reload
sudo systemctl enable openclaw
sudo systemctl start openclaw

sudo apt install -y nginx certbot python3-certbot-nginx

sudo tee /etc/nginx/sites-available/openclaw > /dev/null << EOF
server {
  listen 80;
  server_name your-domain.com;
  location / {
    proxy_pass http://localhost:3000;
    proxy_set_header Host \$host;
    proxy_set_header X-Real-IP \$remote_addr;
    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
  }
}
EOF

sudo ln -s /etc/nginx/sites-available/openclaw /etc/nginx/sites-enabled/
sudo systemctl reload nginx

sudo certbot --nginx -d your-domain.com

aws cloudwatch put-metric-alarm \
  --alarm-name openclaw-cpu-high \
  --alarm-description "Alert when CPU > 80%" \
  --metric-name CPUUtilization \
  --namespace AWS/EC2 \
  --statistic Average \
  --period 300 \
  --threshold 80 \
  --comparison-operator GreaterThanThreshold \
  --dimensions Name=InstanceId,Value=i-xxxxxxxxx