openclaw/docs/install
Alberto Leal 449511484d
fix(gateway): allow ws:// to private network addresses (#28670)
* fix(gateway): allow ws:// to RFC 1918 private network addresses

resolve ws-private-network conflicts

* gateway: keep ws security strict-by-default with private opt-in

* gateway: apply private ws opt-in in connection detail guard

* gateway: apply private ws opt-in in websocket client

* onboarding: gate private ws urls behind explicit opt-in

* gateway tests: enforce strict ws defaults with private opt-in

* onboarding tests: validate private ws opt-in behavior

* gateway client tests: cover private ws env override

* gateway call tests: cover private ws env override

* changelog: add ws strict-default security entry for pr 28670

* docs(onboard): document private ws break-glass env

* docs(gateway): add private ws env to remote guide

* docs(docker): add private ws break-glass env var

* docs(security): add private ws break-glass guidance

* docs(config): document OPENCLAW_ALLOW_PRIVATE_WS

* Update CHANGELOG.md

* gateway: normalize private-ws host classification

* test(gateway): cover non-unicast ipv6 private-ws edges

* changelog: rename insecure private ws break-glass env

* docs(onboard): rename insecure private ws env

* docs(gateway): rename insecure private ws env in config reference

* docs(gateway): rename insecure private ws env in remote guide

* docs(security): rename insecure private ws env

* docs(docker): rename insecure private ws env

* test(onboard): rename insecure private ws env

* onboard: rename insecure private ws env

* test(gateway): rename insecure private ws env in call tests

* gateway: rename insecure private ws env in call flow

* test(gateway): rename insecure private ws env in client tests

* gateway: rename insecure private ws env in client

* docker: pass insecure private ws env to services

* docker-setup: persist insecure private ws env

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-03-01 20:49:45 -08:00
..
ansible.md docs: canonicalize docs paths and align zh navigation (#11428) 2026-02-07 15:40:35 -05:00
bun.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
development-channels.md fix: support legacy and beta prerelease version formats 2026-02-24 02:05:37 +00:00
docker.md fix(gateway): allow ws:// to private network addresses (#28670) 2026-03-01 20:49:45 -08:00
exe-dev.md docs: fix devices approve command in exe.dev guide 2026-02-22 20:52:46 +01:00
fly.md docs: add missing summary/read_when metadata 2026-02-22 20:45:09 +01:00
gcp.md fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego) 2026-02-26 04:46:18 +00:00
hetzner.md docs(security): add vps trust-boundary guidance 2026-02-24 01:02:11 +00:00
index.md docs: warn against third-party 1-click marketplace images 2026-02-19 08:30:29 +01:00
installer.md docs: add Windows installer debug equivalents 2026-02-13 02:07:03 +01:00
macos-vm.md docs: restructure Get Started tab and improve onboarding flow (#9950) 2026-02-05 17:45:01 -05:00
migrating.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
nix.md refactor: replace bot.molt identifiers with ai.openclaw 2026-02-25 05:03:24 +00:00
node.md Docs: sharpen Install tab to stop duplicating Getting Started (#10416) 2026-02-06 08:55:05 -05:00
northflank.mdx Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
podman.md fix(podman): default run-openclaw-podman bind to loopback (land #27491, thanks @robbyczgw-cla) 2026-02-26 12:13:20 +00:00
railway.mdx Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
render.mdx Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
uninstall.md refactor: replace bot.molt identifiers with ai.openclaw 2026-02-25 05:03:24 +00:00
updating.md refactor: replace bot.molt identifiers with ai.openclaw 2026-02-25 05:03:24 +00:00