# ClawSuite → OpenClaw Gateway Connection
#
# The ClawSuite server connects to the OpenClaw Gateway via WebSocket.
# Keep secrets here (never exposed to the browser).

# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
# GATEWAY CONNECTION (Required)
# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

# Gateway WebSocket URL
# - Local gateway (default): ws://127.0.0.1:18789
# - Remote gateway: wss://your-gateway.example.com
# - Docker: ws://host.docker.internal:18789 (to reach host machine)
CLAWDBOT_GATEWAY_URL=ws://127.0.0.1:18789

# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
# AUTHENTICATION (Choose one method)
# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

# Gateway Token (Recommended)
# How to find your token:
#   1. Run: openclaw config get gateway.auth.token
#   2. Or check OpenClaw settings UI
# Format: clw_abc123def456... (64+ characters)
CLAWDBOT_GATEWAY_TOKEN=

# Gateway Password (Alternative to token)
# Only use if your gateway is configured for password auth
# CLAWDBOT_GATEWAY_PASSWORD=

# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
# CLAWSUITE ACCESS CONTROL (Optional)
# ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

# Password-protect ClawSuite web interface
# Leave empty for no authentication (default for local use)
# Set this for production deployments
# CLAWSUITE_PASSWORD=

# Allow access from non-localhost addresses
# Comma-separated list of hostnames/IPs
# Also binds server to 0.0.0.0 instead of 127.0.0.1
# Examples:
#   - Tailscale: my-server.tail1234.ts.net
#   - LAN: 192.168.1.50
#   - Subnet: 192.168.1.0/24
# CLAWSUITE_ALLOWED_HOSTS=