openclaw.json配置

接入第三方api

  "models": {
    "mode": "merge",
    "providers": {
      "cliproxy": {
        "baseUrl": "https://api.cc.cc/v1",
        "apiKey": "sk-123456",
        "api": "openai-completions",
        "models": [
          {
            "id": "gemini-3-flash-preview",
            "name": "gemini-3-flash-preview",
            "reasoning": true,
            "input": [
              "text",
              "image"
            ],
            "cost": {
              "input": 0,
              "output": 0,
              "cacheRead": 0,
              "cacheWrite": 0
            },
            "contextWindow": 200000,
            "maxTokens": 8192
          },
          {
            "id": "gemini-3.1-pro-preview",
            "name": "gemini-3.1-pro-preview",
            "reasoning": true,
            "input": [
              "text",
              "image"
            ],
            "cost": {
              "input": 0,
              "output": 0,
              "cacheRead": 0,
              "cacheWrite": 0
            },
            "contextWindow": 200000,
            "maxTokens": 8192
          },
          {
            "id": "gemini-3.1-pro-high",
            "name": "gemini-3.1-pro-high",
            "reasoning": true,
            "input": [
              "text",
              "image"
            ],
            "cost": {
              "input": 0,
              "output": 0,
              "cacheRead": 0,
              "cacheWrite": 0
            },
            "contextWindow": 200000,
            "maxTokens": 8192
          },
          {
            "id": "gemini-3-pro-image",
            "name": "gemini-3-pro-image",
            "reasoning": true,
            "input": [
              "text",
              "image"
            ],
            "cost": {
              "input": 0,
              "output": 0,
              "cacheRead": 0,
              "cacheWrite": 0
            },
            "contextWindow": 200000,
            "maxTokens": 8192
          },
          {
            "id": "gpt-5.3-codex",
            "name": "gpt-5.3-codex",
            "reasoning": true,
            "input": [
              "text",
              "image"
            ],
            "cost": {
              "input": 0,
              "output": 0,
              "cacheRead": 0,
              "cacheWrite": 0
            },
            "contextWindow": 200000,
            "maxTokens": 8192
          },
          {
            "id": "claude-opus-4-6-thinking",
            "name": "claude-opus-4-6-thinking",
            "reasoning": true,
            "input": [
              "text",
              "image"
            ],
            "cost": {
              "input": 0,
              "output": 0,
              "cacheRead": 0,
              "cacheWrite": 0
            },
            "contextWindow": 200000,
            "maxTokens": 8192
          }
        ]
      }
    }
  },

关闭搜索

  "tools": {
    "web": {
      "search": {
        "enabled": false
      }
    }
  },

nginx反代，适配宝塔的配置

# =========================================================
# AI WebUI 专用 Nginx 反向代理配置 (适配宝塔面板)
# 核心特性：支持流式输出(打字机效果)、大文件上传、长连接不断连、WebSocket 动态升级
# =========================================================

# 注意：如果在宝塔保存或重启时报错 "duplicate connection_upgrade"
# 请直接删除这 4 行 map 代码，说明你的宝塔全局配置里已经自带了。
map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server
{
    listen 80;
    listen 443 ssl;
    listen 443 quic;             # 开启 HTTP/3 (需在防火墙和安全组放行 443 UDP 端口)
    http2 on;

    # [修改提示] 将下面的 yourdomain.com 替换为你自己的域名
    server_name yourdomain.com;
    index index.php index.html index.htm default.php default.htm default.html;
    
    # [修改提示] 替换为你的站点根目录
    root /www/wwwroot/yourdomain.com;

    # 允许上传超大文件 (文档/图片，防止 AI 视觉模型或文档分析上传失败)
    client_max_body_size 500m;

    #CERT-APPLY-CHECK--START
    # 用于 SSL 证书申请时的文件验证相关配置 -- 请勿删除
    include /www/server/panel/vhost/nginx/well-known/yourdomain.com.conf;
    #CERT-APPLY-CHECK--END
    
    include /www/server/panel/vhost/nginx/extension/yourdomain.com/*.conf;

    #HTTP_TO_HTTPS_START (强制 HTTPS 访问)
    set $isRedcert 1;
    if ($server_port != 443) {
        set $isRedcert 2;
    }
    if ( $uri ~ /\.well-known/ ) {
        set $isRedcert 1;
    }
    if ($isRedcert != 1) {
        rewrite ^(/.*)$ https://$host$1 permanent;
    }
    #HTTP_TO_HTTPS_END

    # [修改提示] SSL 证书配置，替换为你的证书路径
    ssl_certificate    /www/server/panel/vhost/cert/yourdomain.com/fullchain.pem;
    ssl_certificate_key    /www/server/panel/vhost/cert/yourdomain.com/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;

    # 现代化的安全头与 HTTP/3 声明 (使用 always 保证错误页也生效)
    add_header Strict-Transport-Security "max-age=31536000" always;
    add_header Alt-Svc 'h3=":443"; ma=86400' always;
    add_header X-Frame-Options SAMEORIGIN always;
    add_header X-Content-Type-Options nosniff always;

    #REWRITE-START URL重写规则引用
    include /www/server/panel/vhost/rewrite/yourdomain.com.conf;
    #REWRITE-END

    # =========================================================
    # 核心反向代理配置 (使用 ^~ 防止被宝塔其他正则抢走静态资源导致页面白屏)
    # =========================================================
    location ^~ / {
        # [修改提示] 替换为你实际的后端服务 IP 和端口
        proxy_pass http://127.0.0.1:18789;
        proxy_http_version 1.1;

        # 基础 Header 传递
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host  $host;
        proxy_set_header X-Forwarded-Port  $server_port;
        proxy_set_header Forwarded         "";

        # WebSocket 动态升级支持
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;

        # 超时设置 (86400s / 24小时，保证 AI 深度思考和长文本生成时不断连)
        proxy_connect_timeout 60s;
        proxy_read_timeout 86400s;
        proxy_send_timeout 86400s;

        # 关键优化：关闭缓冲，实现 AI 打字机流式输出 (SSE) 不卡顿，并降低大文件上传时的内存/磁盘 I/O 压力
        proxy_request_buffering off;
        proxy_buffering off;
        proxy_socket_keepalive on;
    }

    # 禁止访问的敏感文件
    location ~* (\.user.ini|\.htaccess|\.htpasswd|\.env.*|\.project|\.bashrc|\.bash_profile|\.bash_logout|\.DS_Store|\.gitignore|\.gitattributes|LICENSE|README\.md|CLAUDE\.md|CHANGELOG\.md|CHANGELOG|CONTRIBUTING\.md|TODO\.md|FAQ\.md|composer\.json|composer\.lock|package(-lock)?\.json|yarn\.lock|pnpm-lock\.yaml|\.\w+~|\.swp|\.swo|\.bak(up)?|\.old|\.tmp|\.temp|\.log|\.sql(\.gz)?|docker-compose\.yml|docker\.env|Dockerfile|\.csproj|\.sln|Cargo\.toml|Cargo\.lock|go\.mod|go\.sum|phpunit\.xml|phpunit\.xml|pom\.xml|build\.gradl|pyproject\.toml|requirements\.txt|application(-\w+)?\.(ya?ml|properties))$
    {
        return 404;
    }
    
    # 禁止访问的敏感目录
    location ~* /(\.git|\.svn|\.bzr|\.vscode|\.claude|\.idea|\.ssh|\.github|\.npm|\.yarn|\.pnpm|\.cache|\.husky|\.turbo|\.next|\.nuxt|node_modules|runtime)/ {
        return 404;
    }

    # SSL 验证目录 (必须保留)
    location ~ \.well-known {
        allow all;
    }

    if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
        return 403;
    }

    # [修改提示] 替换为你的日志路径
    access_log  /www/wwwlogs/yourdomain.com.log;
    error_log  /www/wwwlogs/yourdomain.com.error.log;
}

反代支持，修改openclaw.json配置，在”gateway”中添加

    "controlUi": {
      "allowedOrigins": [
        "https://oc.ma.al"
      ]
    },

openclaw devices list

openclaw devices approve <那个最新的requestId>