Pinky Pixie

How to @openclaw on VPS safely: from fresh Ubuntu VPS → hardened private AI server in 30 min 1) Lock down SSH → Keys only, no passwords, no root login. sudo nano /etc/ssh/sshd_config # Set explicitly: PasswordAuthentication no PermitRootLogin no sudo sshd -t && sudo systemctl reload ssh 2) Default-deny firewall → Block everything incoming by default. sudo apt install ufw -y sudo ufw default deny incoming sudo ufw default allow outgoing sudo ufw enable 3) Brute-force protection → Auto-ban IPs after failed login attempts. sudo apt install fail2ban -y sudo systemctl enable --now fail2ban 4) Install Tailscale → Your private VPN mesh network. curl -fsSL tailscale.com/install.sh | sh sudo tailscale up 5) SSH only via Tailscale → No more public SSH exposure. # Verify Tailscale is working first! tailscale status sudo ufw allow from 100.64.0.0/10 to any port 22 proto tcp sudo ufw delete allow OpenSSH 6) Web ports private too → App only accessible from your devices. sudo ufw allow from 100.64.0.0/10 to any port 443 proto tcp sudo ufw allow from 100.64.0.0/10 to any port 80 proto tcp 7) Disable IPv6 (optional) → Reduces attack surface if unused. sudo sed -i 's/IPV6=yes/IPV6=no/' /etc/default/ufw echo "net.ipv6.conf.all.disable_ipv6 = 1" | sudo tee -a /etc/sysctl.conf sudo sysctl -p && sudo ufw reload 8) Clawdbot install → AI assistant on your private server. npm install -g clawdbot && clawdbot doctor 9) Lock Clawdbot to owner only → Only you can message the bot. { "dmPolicy": "allowlist", "allowFrom": ["YOUR_TELEGRAM_ID"], "groupPolicy": "allowlist" } 10) Fix credential permissions → Don't leave secrets world-readable. chmod 700 ~/.clawdbot/credentials chmod 600 .env 11) Run security audit → Catches issues you missed - don't skip! clawdbot security audit --deep Verify everything: sudo ufw status ss -tulnp tailscale status clawdbot doctor Result: ✅ No public SSH ✅ No public web ports ✅ Server only reachable via Tailscale ✅ Bot responds only to you ✅ Private AI server in 30 min NOW you can start playing, not before. You buckle your seatbelts before you step on the gas, hmkay?