A comprehensive automation skill for securing OpenClaw Gateway instances with production-grade HTTPS via Nginx reverse proxy and Let's Encrypt SSL certificates.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install openclaw-https-setup
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install openclaw-https-setup using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is OpenClaw HTTPS Setup?
The openclaw-https-setup skill is a specialized deployment utility designed to transition OpenClaw Gateway services from insecure local connections to production-ready, encrypted public endpoints. By automating the integration of Nginx as a reverse proxy, this Openclaw Skills contribution ensures that your AI agent gateway is protected by modern encryption standards.
This skill handles the heavy lifting of server-side configuration, including SELinux policy adjustments, WebSocket support for real-time agent communication, and the implementation of security headers like HSTS. It provides a robust bridge between your local OpenClaw service and the public internet, ensuring data integrity and user privacy through automated SSL/TLS management.
OpenClaw HTTPS Setup Use Cases
- Deploying OpenClaw Gateway to a public VPS for remote access.
- Securing AI agent communication channels with TLS/SSL encryption.
- Implementing a custom domain name for professional Openclaw Skills environments.
- Migrating from HTTP to HTTPS to meet modern web security compliance requirements.
How OpenClaw HTTPS Setup Works
- The skill initiates by installing Nginx on the target VPS (supporting both RHEL/CentOS and Debian/Ubuntu families).
- It configures system-level permissions, such as SELinux network connect booleans, to allow the proxy to communicate with the local gateway.
- An initial HTTP server block is established to facilitate domain validation.
- Certbot is utilized to negotiate with Let's Encrypt for a valid SSL certificate via the standalone or Nginx plugin method.
- The Nginx configuration is automatically upgraded to enforce HTTPS redirects and apply optimized SSL ciphers.
- A background cron job is scheduled to ensure certificates are renewed before expiration without manual intervention.
OpenClaw HTTPS Setup Setup
To begin the secure deployment, ensure your domain points to your VPS IP and run the following as a user with sudo privileges:
# Install Nginx and Certbot (CentOS example)
sudo dnf install -y nginx certbot python3-certbot-nginx
# Enable network connectivity for the proxy
sudo setsebool -P httpd_can_network_connect 1
# Deploy the configuration template for Openclaw Skills
sudo nano /etc/nginx/conf.d/openclaw.conf
OpenClaw HTTPS Setup Data Schema & Taxonomy
The skill manages configuration files and security certificates across the system as follows:
| Path | Purpose | Type |
|---|---|---|
/etc/nginx/conf.d/openclaw.conf |
Reverse proxy and SSL server block definitions | Configuration |
/etc/letsencrypt/live/ |
Storage for fullchain.pem and privkey.pem | SSL Certificates |
/var/log/nginx/error.log |
Monitoring and troubleshooting logs | System Logs |
/etc/crontab |
Automated renewal scheduling | Task Schedule |
OpenClaw HTTPS Setup Advanced Features
- Full WebSocket (WSS) support to ensure persistent connections for streaming AI responses.
- HSTS (HTTP Strict Transport Security) preloading to prevent protocol downgrade attacks.
- Hardened SSL protocols (TLSv1.2 and TLSv1.3 only) to eliminate deprecated cryptographic vulnerabilities.
- Automatic non-interactive SSL renewal integration for zero-maintenance security.
- Granular proxy timeout settings optimized for long-running LLM inference tasks.
SKILL.md
Loading
Related Openclaw Skills
Video Compressor AI
A conversational AI skill that intelligently compresses video files by analyzing motion complexity and scene transitions to preserve visual quality.
Best Video Editor for Beginners
An interactive AI assistant that matches your creative goals, hardware, and budget with the ideal beginner-friendly video editing software.
Agent Memory
A memory management system that enables AI agents to maintain persistent, cross-session long-term memory through structured file storage.
MaskClaw Core
MaskClaw Core is an edge-side privacy protection suite that provides intelligent visual masking, behavior monitoring, and self-evolving security rules for AI agents.
Travel Risk Checker
An intelligent travel guardian for assessing connection risks, suggesting emergency accommodation, and verifying late-night transportation.
Playwright Browser
A sophisticated web automation skill that enables AI agents to control real browsers for deep data extraction and network response hooking.
Featured*
