OpenClaw (Coolify build)

Why it's ranked here

A practical deployment wrapper with unusually broad configuration coverage. Persistent state, provider selection, proxy authentication, browser access, and channel setup share one container workflow. The main concern is operational sharpness: security settings are optional, while documentation and startup behavior disagree about gateway token generation.

What's good

Configuration layers cleanly: custom JSON forms the base, persisted state merges over it, and environment variables take precedence. Removed provider variables can clean stale provider entries. The merge logic blocks prototype-pollution keys, nginx handles WebSocket upgrades, and dedicated volumes preserve projects, tools, browser sessions, and credentials.

Tradeoffs

Startup requires a gateway token and at least one provider credential or local model endpoint. Basic authentication remains optional, so omitting its password leaves nginx unprotected. Direct LAN binding bypasses nginx authentication. The browser feature needs a separate Chromium container, substantial shared memory, and manual login for protected sites. Advanced group rules remain JSON-only.

How to use it well

Best for operators who want one reproducible host for an OpenClaw gateway, messaging channels, webhooks, and authenticated browser automation. Pin the upstream source reference when building, persist both application and browser volumes, set explicit gateway and HTTP credentials, and restrict allowed origins. It does not supply model inference itself unless connected to Ollama; otherwise you still need external provider credentials.

Observed

Packaging

Two-layer Docker build with separate base, final gateway, and optional Chromium sidecar images.

Install surface

Runs through Docker directly or Docker Compose, with published container images referenced by the examples.

Interfaces

Web control UI, bearer-authenticated gateway, webhook endpoints, and proxied browser desktop.

Platform support

Automated image workflow defines builds for amd64 and arm64.

Implementation

Deployment logic primarily uses JavaScript, Bash, Dockerfiles, nginx configuration, and YAML workflows.

Tests

Repository includes a dependency-free JavaScript utility test suite and a command-line smoke check.