mosaic/stack
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix(docker): use envsubst template pattern — no hardcoded URLs or keys (MS22-P1a)
All checks were successful
ci/woodpecker/push/infra Pipeline was successful
Details

Browse Source
This commit is contained in:
Jason Woltje
2026-03-01 07:54:28 -06:00
parent 256171cc62
commit 11136e2f23
11 changed files with 193 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
docker/openclaw-instances/entrypoint.sh Executable file
View File

@@ -0,0 +1,23 @@
#!/bin/sh
# OpenClaw container entrypoint — renders config template via envsubst then starts gateway
set -e
TEMPLATE="/config/openclaw.json.template"
CONFIG="/tmp/openclaw.json"
if [ ! -f "$TEMPLATE" ]; then
echo "ERROR: Config template not found at $TEMPLATE"
exit 1
fi
# Validate required env vars
: "${ZAI_API_KEY:?ZAI_API_KEY is required}"
: "${OPENCLAW_GATEWAY_TOKEN:?OPENCLAW_GATEWAY_TOKEN is required}"
: "${OLLAMA_BASE_URL:?OLLAMA_BASE_URL is required (e.g. http://10.1.1.42:11434)}"
# Render template -> final config (no hardcoded values in image or volumes)
envsubst < "$TEMPLATE" > "$CONFIG"
export OPENCLAW_CONFIG_PATH="$CONFIG"
exec openclaw gateway run --bind lan --auth token "$@"

1
docker/openclaw-instances/jarvis-main.env
View File

@@ -1,3 +1,4 @@
OPENCLAW_CONFIG_PATH=/config/openclaw.json
ZAI_API_KEY=REPLACE_WITH_ZAI_API_KEY
OPENCLAW_GATEWAY_TOKEN=REPLACE_WITH_UNIQUE_GATEWAY_TOKEN
OLLAMA_BASE_URL=REPLACE_WITH_OLLAMA_BASE_URL

2
docker/openclaw-instances/jarvis-main.json → docker/openclaw-instances/jarvis-main.json.template
View File

@@ -22,7 +22,7 @@
"mode": "merge",
"providers": {
"ollama": {
"baseUrl": "http://10.1.1.42:11434/v1",
"baseUrl": "${OLLAMA_BASE_URL}/v1",
"api": "openai-completions",
"models": [
{

1
docker/openclaw-instances/jarvis-operations.env
View File

@@ -1,3 +1,4 @@
OPENCLAW_CONFIG_PATH=/config/openclaw.json
ZAI_API_KEY=REPLACE_WITH_ZAI_API_KEY
OPENCLAW_GATEWAY_TOKEN=REPLACE_WITH_UNIQUE_GATEWAY_TOKEN
OLLAMA_BASE_URL=REPLACE_WITH_OLLAMA_BASE_URL

2
docker/openclaw-instances/jarvis-operations.json → docker/openclaw-instances/jarvis-operations.json.template
View File

@@ -21,7 +21,7 @@
"mode": "merge",
"providers": {
"ollama": {
"baseUrl": "http://10.1.1.42:11434/v1",
"baseUrl": "${OLLAMA_BASE_URL}/v1",
"api": "openai-completions",
"models": [
{

1
docker/openclaw-instances/jarvis-projects.env
View File

@@ -1,3 +1,4 @@
OPENCLAW_CONFIG_PATH=/config/openclaw.json
ZAI_API_KEY=REPLACE_WITH_ZAI_API_KEY
OPENCLAW_GATEWAY_TOKEN=REPLACE_WITH_UNIQUE_GATEWAY_TOKEN
OLLAMA_BASE_URL=REPLACE_WITH_OLLAMA_BASE_URL

2
docker/openclaw-instances/jarvis-projects.json → docker/openclaw-instances/jarvis-projects.json.template
View File

@@ -20,7 +20,7 @@
"mode": "merge",
"providers": {
"ollama": {
"baseUrl": "http://10.1.1.42:11434/v1",
"baseUrl": "${OLLAMA_BASE_URL}/v1",
"api": "openai-completions",
"models": [
{

1
docker/openclaw-instances/jarvis-research.env
View File

@@ -1,3 +1,4 @@
OPENCLAW_CONFIG_PATH=/config/openclaw.json
ZAI_API_KEY=REPLACE_WITH_ZAI_API_KEY
OPENCLAW_GATEWAY_TOKEN=REPLACE_WITH_UNIQUE_GATEWAY_TOKEN
OLLAMA_BASE_URL=REPLACE_WITH_OLLAMA_BASE_URL

2
docker/openclaw-instances/jarvis-research.json → docker/openclaw-instances/jarvis-research.json.template
View File

@@ -20,7 +20,7 @@
"mode": "merge",
"providers": {
"ollama": {
"baseUrl": "http://10.1.1.42:11434/v1",
"baseUrl": "${OLLAMA_BASE_URL}/v1",
"api": "openai-completions",
"models": [
{