OpenClaw VPS部署方案

┌─────────────────────────────────────────────────────────────┐
│                      外部访问层                              │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐      │
│  │   Telegram   │  │  Control UI  │  │    SSH       │      │
│  │   Bot API    │  │   (HTTP)     │  │   管理       │      │
│  └──────┬───────┘  └──────┬───────┘  └──────┬───────┘      │
└─────────┼─────────────────┼─────────────────┼───────────────┘
          │                 │                 │
          ▼                 ▼                 ▼
┌─────────────────────────────────────────────────────────────┐
│                    AWS EC2 服务器                            │
│  实例ID: <your-ec2-instance-id>                             │
│  公网IP: <your-ec2-ip>                                      │
│  类型: t3.small (2 vCPU, 2GB RAM)                           │
│  系统: Amazon Linux 2023                                    │
│                                                             │
│  ┌───────────────────────────────────────────────────────┐  │
│  │         OpenClaw Gateway v2026.3.2                  │  │
│  │  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐   │  │
│  │  │  Telegram   │  │  WebSocket  │  │  HTTP API   │   │  │
│  │  │   通道      │  │  服务器     │  │  接口       │   │  │
│  │  │             │  │ (端口:18789)│  │ (端口:18789)│   │  │
│  │  └──────┬──────┘  └──────┬──────┘  └──────┬──────┘   │  │
│  │         │                │                 │          │  │
│  │         └────────────────┴─────────────────┘          │  │
│  │                          │                            │  │
│  │              ┌───────────┴───────────┐                │  │
│  │              │   Agent 处理引擎      │                │  │
│  │              │   (AI 模型: GPT-OSS) │                │  │
│  │              └───────────┬───────────┘                │  │
│  │                          │                            │  │
│  │              ┌───────────┴───────────┐                │  │
│  │              │   工具层              │                │  │
│  │              │   web_search, web_fetch, cron          │  │
│  │              └───────────┴───────────┘                │  │
│  └───────────────────────────────────────────────────────┘  │
└─────────────────────────────────────────────────────────────┘

# 安装 fnm (Node 版本管理器)
curl -fsSL https://fnm.vercel.app/install | bash

# 加载 fnm
export PATH=$HOME/.local/share/fnm/bin:$PATH
eval $(fnm env)

# 安装 Node.js 22
fnm install 22
fnm use 22

# 验证
node -v  # v22.x.x
npm -v   # 10.x.x

{
  "gateway": {
    "mode": "local",
    "bind": "loopback",
    "port": 18789,
    "auth": {
      "mode": "token",
      "token": "your-secret-token-here"
    },
    "http": {
      "endpoints": {
        "chatCompletions": {
          "enabled": true
        }
      }
    }
  },
  "agents": {
    "defaults": {
      "model": {
        "primary": "openai-compat/openai/gpt-oss-120b"
      },
      "elevatedDefault": "full",
      "maxConcurrent": 4,
      "subagents": {
        "maxConcurrent": 8
      }
    }
  },
  "models": {
    "mode": "merge",
    "providers": {
      "openai-compat": {
        "baseUrl": "https://api.agentify.top/v1",
        "apiKey": "your-api-key-here",
        "api": "openai-completions",
        "models": [
          {
            "id": "openai/gpt-oss-120b",
            "name": "GPT-OSS-120B"
          }
        ]
      }
    }
  },
  "tools": {
    "allow": [
      "web_search", "web_fetch", "cron"
    ],
    "elevated": {
      "enabled": true,
      "allowFrom": {
        "telegram": ["your-telegram-user-id"]
      }
    }
  },
  "channels": {
    "telegram": {
      "enabled": true,
      "botToken": "your-telegram-bot-token",
      "dmPolicy": "pairing",
      "allowFrom": ["your-telegram-user-id"],
      "groupPolicy": "disabled",
      "groups": {
        "*": {
          "requireMention": true
        }
      }
    }
  },
  "plugins": {
    "entries": {
      "telegram": {
        "enabled": true
      }
    }
  }
}

mkdir -p ~/.config/systemd/user
cat > ~/.config/systemd/user/openclaw-gateway.service << 'EOF'
[Unit]
Description=OpenClaw Gateway (v2026.3.2)
After=network.target

[Service]
Type=simple
Environment="PATH=/home/ec2-user/.local/share/fnm/bin:/usr/local/bin:/usr/bin:/bin"
Environment="HOME=/home/ec2-user"
ExecStart=/bin/bash -c 'export PATH=/home/ec2-user/.local/share/fnm/bin:$PATH && eval $(fnm env) && openclaw gateway --port 18789'
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal

[Install]
WantedBy=default.target
EOF

# 启用并启动服务
systemctl --user daemon-reload
systemctl --user enable openclaw-gateway
systemctl --user start openclaw-gateway

# 验证状态
systemctl --user status openclaw-gateway

# 查看 Gateway 状态
systemctl --user status openclaw-gateway

# 重启 Gateway
systemctl --user restart openclaw-gateway

# 查看日志
journalctl --user -u openclaw-gateway -f

# Gateway CLI 命令
export PATH=$HOME/.local/share/fnm/bin:$PATH
eval $(fnm env)
openclaw --version
openclaw status
openclaw models list

# SSH 到 EC2
ssh -i ~/.ssh/openclaw.pem ec2-user@<your-ec2-ip>

# 停止服务
systemctl --user stop openclaw-gateway

# 启动服务
systemctl --user start openclaw-gateway

# 查看日志
journalctl --user -u openclaw-gateway -f

# 查看待配对请求
openclaw pairing list telegram

# 批准配对请求
openclaw pairing approve telegram <CODE>

# 拒绝配对请求
openclaw pairing deny telegram <CODE>

# 查看所有配对
openclaw pairing list

#!/bin/bash
# backup-openclaw.sh

BACKUP_DIR="$HOME/openclaw-backup-$(date +%Y%m%d)"
mkdir -p "$BACKUP_DIR"

# EC2 (通过 SSH)
ssh -i ~/.ssh/openclaw.pem ec2-user@<your-ec2-ip> \
  'tar czf - -C /home/ec2-user .openclaw' > "$BACKUP_DIR/ec2-openclaw.tar.gz"

echo "备份完成: $BACKUP_DIR"