feat: update openclaw configuration files

apps/openclaw/.env

@@ -1,6 +1,14 @@
-W9_REPO=websoft9dev/openclaw
+# OpenClaw on Docker - Environment Configuration
+# Edit this file to customize the deployment settings.
+# Full documentation: https://docs.openclaw.ai/install/docker
+
+# =========================================================
+# Image
+# version tags: https://github.com/openclaw/openclaw/releases
+# =========================================================
+W9_REPO=ghcr.io/openclaw/openclaw
 W9_DIST='community'
-W9_VERSION='2026.3.11-wecom'
+W9_VERSION='2026.3.13-1'
 
 # =========================================================
 # Authentication
@@ -27,6 +35,7 @@ W9_ID='openclaw'
 W9_HTTP_PORT=18789
 W9_BRIDGE_PORT=18790
 W9_URL='internet_ip:$W9_HTTP_PORT_SET'
+W9_LOGIN_PASSWORD=$W9_POWER_PASSWORD
 W9_NETWORK=websoft9
 
 #### ---------------------------------------------------------------------------- ####
@@ -42,46 +51,8 @@ OPENCLAW_GATEWAY_TOKEN=$W9_POWER_PASSWORD
 OPENCLAW_GATEWAY_BIND=lan
 
 # Allow insecure private WebSocket connections (leave empty unless needed)
-OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=
-
-# =========================================================
-# AI Providers (国内主流大模型 API 配置)
-# 填写任意一个模型的 API Key 即可启用，支持多个同时配置
-# W9_*_SET 变量会在应用商店 UI 中显示，用户可直接填写
-# =========================================================
-
-# DeepSeek — 国产高性价比大模型  
-# Get key: https://platform.deepseek.com/api_keys
-W9_DEEPSEEK_API_KEY_SET=
-
-# 百度文心一言 (Baidu ERNIE)
-# Get key: https://console.bce.baidu.com/qianfan/ais/console/applicationConsole/application
-W9_BAIDU_API_KEY_SET=
-W9_BAIDU_SECRET_KEY_SET=
-
-# 阿里通义千问 (Alibaba Qwen)  
-# Get key: https://dashscope.console.aliyun.com/apiKey
-W9_ALIBABA_API_KEY_SET=
-
-# Moonshot/Kimi — 长文本专家 (200K context)
-# Get key: https://platform.moonshot.cn/console/api-keys
-W9_MOONSHOT_API_KEY_SET=
-
-# ─────────────────────────────────────────────────────────
-# 企业微信 (WeCom) — @sunnoy/wecom (社区增强插件)
-# ─────────────────────────────────────────────────────────
-# WebSocket 长连接模式，无需回调 URL 和 Token/AESKey
-# 创建位置: 企业微信管理后台 → 应用管理 → 智能机器人 → 创建机器人 → 长连接模式
-# 参考文档: https://open.work.weixin.qq.com/help2/pc/cat?doc_id=21657
-W9_WECOM_BOT_ID_SET=
-W9_WECOM_BOT_SECRET_SET=
+# Set to 'true' when accessing via HTTP on a non-localhost address (no HTTPS).
+# This lets the server handle device identity instead of the browser's crypto.subtle API.
+OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=true
 
-# 私聊准入策略: open=所有成员免审批 | pairing=新用户需管理员approve | disabled=禁用私聊
-W9_WECOM_DM_POLICY_SET=open
 
-# 自建应用 (Agent) — 可选，用于发送文件/图片/主动推送到部门/标签
-# 创建位置: 企业微信管理后台 → 应用管理 → 自建 → 创建应用
-# 注意: 需在「企业可信IP」中添加服务器 IP，无需配置接收消息回调
-W9_WECOM_AGENT_CORP_ID_SET=
-W9_WECOM_AGENT_SECRET_SET=
-W9_WECOM_AGENT_ID_SET=

apps/openclaw/README.md

@@ -0,0 +1,26 @@
+# OpenClaw on Docker  
+
+This is an **[Docker Compose template](https://github.com/Websoft9/docker-library)** powered by [Websoft9](https://www.websoft9.com) based on Docker for OpenClaw:
+
+
+ - community:  2026.3.13-1
+
+
+## System Requirements
+
+The following are the minimal [recommended requirements](https://openclaw.ai):
+
+* **RAM**: 2 GB or more
+* **CPU**: 2 cores or higher
+* **Disk**: at least 10 GB of free space
+* **bandwidth**: more fluent experience over 100M  
+
+## Install
+
+You can install this OpenClaw by [How to use it?](https://github.com/Websoft9/docker-library#how-to-use-it).   
+
+If you want use OpenClaw with **Websoft9 Business Support** free, you can [subscribe OpenClaw](https://www.websoft9.com/apps) on Cloud platform
+
+## Documentation
+
+[OpenClaw Administrator Guide](https://support.websoft9.com/docs/openclaw) powered by Websoft9

apps/openclaw/docker-compose.yml

@@ -2,32 +2,47 @@
 # docs: https://docs.openclaw.ai/install/docker
 
 services:
-  openclaw:
+  # One-time permission fix so the named volume is writable by uid 1000 (node).
+  # Mirrors what the official docker-setup.sh does before starting the gateway.
+  openclaw-init:
+    image: $W9_REPO:$W9_VERSION
+    container_name: ${W9_ID}-init
+    restart: "no"
+    user: "0"
+    entrypoint:
+      - "sh"
+      - "-c"
+      - |
+        mkdir -p /home/node/.openclaw
+        [ ! -s /home/node/.openclaw/openclaw.json ] && cp /seed/openclaw.json /home/node/.openclaw/openclaw.json
+        chown -R 1000:1000 /home/node/.openclaw
+    volumes:
+      - openclaw_data:/home/node/.openclaw
+      - ./src/openclaw.json:/seed/openclaw.json:ro
+
+  openclaw-gateway:
     image: $W9_REPO:$W9_VERSION
     container_name: $W9_ID
     restart: unless-stopped
     init: true
-    user: root
-    entrypoint: [ "/docker-entrypoint.sh" ]
-    command: [ "node", "dist/index.js", "gateway", "--bind", "${OPENCLAW_GATEWAY_BIND:-lan}", "--port", "18789" ]
+    depends_on:
+      openclaw-init:
+        condition: service_completed_successfully
+    command: [ "node", "dist/index.js", "gateway", "--allow-unconfigured", "--bind", "${OPENCLAW_GATEWAY_BIND:-lan}", "--port", "18789" ]
     ports:
       - $W9_HTTP_PORT_SET:18789
       - $W9_BRIDGE_PORT_SET:18790
     env_file: .env
     environment:
       - HOME=/home/node
+      - NODE_ENV=production
       - TERM=xterm-256color
       - OPENCLAW_GATEWAY_TOKEN=$W9_POWER_PASSWORD
       - OPENCLAW_GATEWAY_BIND=${OPENCLAW_GATEWAY_BIND}
       - OPENCLAW_GATEWAY_PORT=18789
       - OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=${OPENCLAW_ALLOW_INSECURE_PRIVATE_WS:-}
     volumes:
-      - openclaw_agents:/home/node/.openclaw/agents
-      - openclaw_workspace:/home/node/.openclaw/workspace
-      - openclaw_canvas:/home/node/.openclaw/canvas
-      - openclaw_cron:/home/node/.openclaw/cron
-      - openclaw_queue:/home/node/.openclaw/delivery-queue
-      - ./src/init.js:/init.js:ro
+      - openclaw_data:/home/node/.openclaw
     healthcheck:
       test:
         - "CMD"
@@ -39,15 +54,10 @@ services:
       retries: 3
       start_period: 30s
 
-  # Optional CLI service for channel setup and management commands.
-  # Not started by default. Usage:
-  #   docker compose --profile cli run --rm openclaw-cli channels login
-  #   docker compose --profile cli run --rm openclaw-cli config set <key> <value>
-  #   docker compose --profile cli run --rm openclaw-cli devices list
   openclaw-cli:
     image: $W9_REPO:$W9_VERSION
     container_name: ${W9_ID}-cli
-    network_mode: "service:openclaw"
+    network_mode: "service:openclaw-gateway"
     profiles:
       - cli
     cap_drop:
@@ -57,30 +67,23 @@ services:
       - no-new-privileges:true
     environment:
       - HOME=/home/node
+      - NODE_ENV=production
       - TERM=xterm-256color
       - OPENCLAW_GATEWAY_TOKEN=$W9_POWER_PASSWORD
       - OPENCLAW_GATEWAY_BIND=${OPENCLAW_GATEWAY_BIND}
       - OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=${OPENCLAW_ALLOW_INSECURE_PRIVATE_WS:-}
       - BROWSER=echo
     volumes:
-      - openclaw_agents:/home/node/.openclaw/agents
-      - openclaw_workspace:/home/node/.openclaw/workspace
-      - openclaw_canvas:/home/node/.openclaw/canvas
-      - openclaw_cron:/home/node/.openclaw/cron
-      - openclaw_queue:/home/node/.openclaw/delivery-queue
+      - openclaw_data:/home/node/.openclaw
     stdin_open: true
     tty: true
     init: true
     entrypoint: [ "node", "dist/index.js" ]
     depends_on:
-      - openclaw
+      - openclaw-gateway
 
 volumes:
-  openclaw_agents:
-  openclaw_workspace:
-  openclaw_canvas:
-  openclaw_cron:
-  openclaw_queue:
+  openclaw_data:
 
 
 networks: