feat: add domain and install scripts for apps

openclaw/domain.sh

@@ -0,0 +1,63 @@
+#!/bin/bash
+
+APP_NAME="openclaw"
+APP_DIR="/var/excloud/apps"
+APP_UPSTREAM_PORT="${EXC_APP_UPSTREAM_PORT:-18789}"
+APP_BRIDGE_PORT="${EXC_APP_BRIDGE_PORT:-18790}"
+OPENCLAW_IMAGE="${OPENCLAW_IMAGE:-ghcr.io/openclaw/openclaw:latest}"
+
+DOMAIN="${1}"
+
+if [ -z "${DOMAIN}" ]; then
+  echo "Error: URL argument is required. Example:" >&2
+  echo "domain.sh sub.example.com" >&2
+  exit 1
+fi
+
+OPENCLAW_DIR="${APP_DIR}/${APP_NAME}"
+DATA_DIR="${OPENCLAW_DIR}/data"
+CONFIG_DIR="${DATA_DIR}/config"
+WORKSPACE_DIR="${DATA_DIR}/workspace"
+TOKEN_FILE="${OPENCLAW_DIR}/.gateway_token"
+ENV_FILE="${OPENCLAW_DIR}/.env"
+LEGACY_OVERRIDE_FILE="${OPENCLAW_DIR}/compose.override.yml"
+
+mkdir -p "${CONFIG_DIR}/identity"
+mkdir -p "${CONFIG_DIR}/agents/main/agent"
+mkdir -p "${CONFIG_DIR}/agents/main/sessions"
+mkdir -p "${WORKSPACE_DIR}"
+chown -R 1000:1000 "${DATA_DIR}"
+
+if [ ! -f "${TOKEN_FILE}" ]; then
+  openssl rand -hex 32 > "${TOKEN_FILE}"
+fi
+
+OPENCLAW_GATEWAY_TOKEN="$(cat "${TOKEN_FILE}")"
+
+cat > "${ENV_FILE}" <<EOF
+OPENCLAW_IMAGE=${OPENCLAW_IMAGE}
+OPENCLAW_CONFIG_DIR=${CONFIG_DIR}
+OPENCLAW_WORKSPACE_DIR=${WORKSPACE_DIR}
+OPENCLAW_GATEWAY_PORT=127.0.0.1:${APP_UPSTREAM_PORT}
+OPENCLAW_BRIDGE_PORT=127.0.0.1:${APP_BRIDGE_PORT}
+OPENCLAW_GATEWAY_BIND=lan
+OPENCLAW_GATEWAY_TOKEN=${OPENCLAW_GATEWAY_TOKEN}
+EOF
+
+cd "${OPENCLAW_DIR}"
+rm -f "${LEGACY_OVERRIDE_FILE}"
+docker compose run --rm --no-deps --entrypoint node openclaw-gateway dist/index.js config set gateway.mode local
+docker compose run --rm --no-deps --entrypoint node openclaw-gateway dist/index.js config set gateway.bind lan
+docker compose run --rm --no-deps --entrypoint node openclaw-gateway dist/index.js config set gateway.controlUi.allowedOrigins "[\"https://${DOMAIN}\",\"http://localhost:${APP_UPSTREAM_PORT}\",\"http://127.0.0.1:${APP_UPSTREAM_PORT}\"]" --strict-json
+docker compose -f docker-compose.yml up -d openclaw-gateway
+
+cat > /etc/caddy/Caddyfile <<EOF
+https://${DOMAIN} {
+        reverse_proxy 127.0.0.1:${APP_UPSTREAM_PORT}
+}
+EOF
+
+echo "Caddyfile updated"
+
+systemctl enable caddy
+systemctl reload caddy