OpenClaw HTTPS Setup

Automate secure HTTPS setup for OpenClaw Gateway on a VPS by configuring Nginx reverse proxy with SSL certificates and domain redirection.

This script appears to do what it claims: install/configure Nginx, obtain Let's Encrypt certificates, and add a renewal cron job. Before running it: 1) Review the script line-by-line and back up existing /etc/nginx configs. 2) Note the script expects you to run it as a non-root user with sudo (it exits if run as root) — reconcile this with any README that says 'run as root'. 3) Confirm the cron job will run with sufficient privileges to renew certificates (the script installs the cron entry for the invoking user, which may lack permissions to write /etc/letsencrypt unless renew is run via sudo/root crontab). 4) Ensure port 80 is reachable (Let's Encrypt validation) and that stopping/starting Nginx is acceptable for your environment. 5) If you plan to let an agent invoke this skill autonomously, be cautious: it will perform system-level changes and create persistent jobs. If anything is unclear, test on a non-production VPS or run steps manually rather than running the script unmodified.

Type: OpenClaw Skill Name: openclaw-https-setup Version: 1.0.0 The skill bundle provides standard administrative instructions and a bash script (scripts/setup_openclaw_https.sh) to configure Nginx as a reverse proxy with Let's Encrypt SSL certificates. It uses legitimate system tools like dnf/apt, certbot, and systemctl to secure the OpenClaw Gateway service. No malicious intent, data exfiltration, or suspicious obfuscation was found.