Docker Compose config for running containerized OpenClaw, connected to Tailscale

docker-compose.yml

services:
  openclaw:
    build: https://github.com/openclaw/openclaw.git#main
    container_name: openclaw
    restart: unless-stopped
    network_mode: host

    ports:
      - "18789:18789" # Web UI

    volumes:
      # This gives OpenClaw permission to control your host's Tailscale connection
      - /var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock
      - state:/home/node/.openclaw/

    environment:
      # Tell OpenClaw to use the host's Tailscale connection
      - OPENCLAW_GATEWAY_TAILSCALE_MODE=serve
      # When using Tailscale Serve, OpenClaw MUST bind to localhost only (security feature)
      - OPENCLAW_GATEWAY_BIND=loopback
      - OPENCLAW_GATEWAY_TOKEN=token
      - OPENCLAW_GATEWAY_BIND=0.0.0.0

volumes:
  state:
    driver: local
    driver_opts:
      type: "none"
      o: "bind"
      device: "${PWD}/.openclaw"