From d8d16e1b56e5fb8b4d6b905369853ec148007c89 Mon Sep 17 00:00:00 2001
From: kun <X978Y@icloud.com>
Date: Tue, 18 Aug 2026 13:33:26 +0800
Subject: [PATCH] update 26.8.11

---
 .idea/workspace.xml                 | 15 +++++++++--
 4600Pro/OpenClaw/.env               |  4 ---
 4600Pro/OpenClaw/docker-compose.yml | 42 +++++++----------------------
 3 files changed, 23 insertions(+), 38 deletions(-)

diff --git a/.idea/workspace.xml b/.idea/workspace.xml
index f35fa29..6af5f0c 100644
--- a/.idea/workspace.xml
+++ b/.idea/workspace.xml
@@ -4,7 +4,9 @@
     <option name="autoReloadType" value="ALL" />
   </component>
   <component name="ChangeListManager">
-    <list default="true" id="ae3fb6a0-aca4-4c0a-858b-91952e6dcdd3" name="更改" comment="update 26.8.11" />
+    <list default="true" id="ae3fb6a0-aca4-4c0a-858b-91952e6dcdd3" name="更改" comment="update 26.8.11">
+      <change beforePath="$PROJECT_DIR$/4600Pro/OpenClaw/docker-compose.yml" beforeDir="false" afterPath="$PROJECT_DIR$/4600Pro/OpenClaw/docker-compose.yml" afterDir="false" />
+    </list>
     <option name="SHOW_DIALOG" value="false" />
     <option name="HIGHLIGHT_CONFLICTS" value="true" />
     <option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
@@ -82,6 +84,7 @@
       <workItem from="1786323616451" duration="105000" />
       <workItem from="1786409759648" duration="770000" />
       <workItem from="1787022222565" duration="1218000" />
+      <workItem from="1787030835540" duration="319000" />
     </task>
     <task id="LOCAL-00001" summary="update 26.7.27">
       <option name="closed" value="true" />
@@ -219,7 +222,15 @@
       <option name="project" value="LOCAL" />
       <updated>1787022400600</updated>
     </task>
-    <option name="localTasksCounter" value="18" />
+    <task id="LOCAL-00018" summary="update 26.8.11">
+      <option name="closed" value="true" />
+      <created>1787030905479</created>
+      <option name="number" value="00018" />
+      <option name="presentableId" value="LOCAL-00018" />
+      <option name="project" value="LOCAL" />
+      <updated>1787030905479</updated>
+    </task>
+    <option name="localTasksCounter" value="19" />
     <servers />
   </component>
   <component name="TypeScriptGeneratedFilesManager">
diff --git a/4600Pro/OpenClaw/.env b/4600Pro/OpenClaw/.env
index 68a7e30..87c97e4 100644
--- a/4600Pro/OpenClaw/.env
+++ b/4600Pro/OpenClaw/.env
@@ -1,10 +1,6 @@
 # 官方镜像
 OPENCLAW_IMAGE=ghcr.io/openclaw/openclaw:latest
 
-# 宿主机持久化目录
-OPENCLAW_CONFIG_DIR=/volume2/docker/docker_projects/openclaw/data
-OPENCLAW_WORKSPACE_DIR=/volume2/docker/docker_projects/openclaw/workspace
-OPENCLAW_AUTH_PROFILE_SECRET_DIR=/volume2/docker/docker_projects/openclaw/auth
 
 # 你希望 Web UI 使用 2800
 OPENCLAW_GATEWAY_PORT=2800
diff --git a/4600Pro/OpenClaw/docker-compose.yml b/4600Pro/OpenClaw/docker-compose.yml
index 07588d7..8d71267 100644
--- a/4600Pro/OpenClaw/docker-compose.yml
+++ b/4600Pro/OpenClaw/docker-compose.yml
@@ -1,6 +1,9 @@
 services:
   openclaw-gateway:
     image: ${OPENCLAW_IMAGE}
+    container_name: openclaw-gateway
+
+    user: "0:0"
 
     env_file:
       - .env
@@ -9,19 +12,15 @@ services:
       HOME: /home/node
       OPENCLAW_HOME: /home/node
       TERM: xterm-256color
-
       OPENCLAW_STATE_DIR: /home/node/.openclaw
       OPENCLAW_CONFIG_PATH: /home/node/.openclaw/openclaw.json
       OPENCLAW_CONFIG_DIR: /home/node/.openclaw
       OPENCLAW_WORKSPACE_DIR: /home/node/.openclaw/workspace
-
       OPENCLAW_GATEWAY_TOKEN: ${OPENCLAW_GATEWAY_TOKEN}
       TZ: ${OPENCLAW_TZ:-Asia/Shanghai}
 
     volumes:
-      - "${OPENCLAW_CONFIG_DIR}:/home/node/.openclaw"
-      - "${OPENCLAW_WORKSPACE_DIR}:/home/node/.openclaw/workspace"
-      - "${OPENCLAW_AUTH_PROFILE_SECRET_DIR}:/home/node/.config/openclaw"
+      - /volume2/docker/docker_projects/openclaw/data:/home/node/.openclaw
 
     ports:
       - "${OPENCLAW_GATEWAY_PORT:-2800}:18789"
@@ -30,13 +29,6 @@ services:
     extra_hosts:
       - "host.docker.internal:host-gateway"
 
-    cap_drop:
-      - NET_RAW
-      - NET_ADMIN
-
-    security_opt:
-      - no-new-privileges:true
-
     init: true
     restart: unless-stopped
 
@@ -52,12 +44,7 @@ services:
       ]
 
     healthcheck:
-      test:
-        [
-          "CMD",
-          "node",
-          "dist/docker-healthcheck.js"
-        ]
+      test: ["CMD", "node", "dist/docker-healthcheck.js"]
       interval: 30s
       timeout: 5s
       retries: 5
@@ -66,37 +53,28 @@ services:
 
   openclaw-cli:
     image: ${OPENCLAW_IMAGE}
+    container_name: openclaw-cli
 
-    network_mode: "service:openclaw-gateway"
+    user: "0:0"
 
     env_file:
       - .env
 
+    network_mode: "service:openclaw-gateway"
+
     environment:
       HOME: /home/node
       OPENCLAW_HOME: /home/node
       TERM: xterm-256color
-
       OPENCLAW_STATE_DIR: /home/node/.openclaw
       OPENCLAW_CONFIG_PATH: /home/node/.openclaw/openclaw.json
       OPENCLAW_CONFIG_DIR: /home/node/.openclaw
       OPENCLAW_WORKSPACE_DIR: /home/node/.openclaw/workspace
-
       OPENCLAW_GATEWAY_TOKEN: ${OPENCLAW_GATEWAY_TOKEN}
-      BROWSER: echo
       TZ: ${OPENCLAW_TZ:-Asia/Shanghai}
 
     volumes:
-      - "${OPENCLAW_CONFIG_DIR}:/home/node/.openclaw"
-      - "${OPENCLAW_WORKSPACE_DIR}:/home/node/.openclaw/workspace"
-      - "${OPENCLAW_AUTH_PROFILE_SECRET_DIR}:/home/node/.config/openclaw"
-
-    cap_drop:
-      - NET_RAW
-      - NET_ADMIN
-
-    security_opt:
-      - no-new-privileges:true
+      - /volume2/docker/docker_projects/openclaw/data:/home/node/.openclaw
 
     stdin_open: true
     tty: true