Skip to content
/ openclaw-cleo Public

Super-powered OpenClaw installer for Proxmox, powered by CLEO task management. Includes Doppler secrets, NGINX Proxy Manager integration, and automated LXC provisioning.

3 stars 1 fork Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

kryptobaseddev/openclaw-cleo

BranchesTags

Repository files navigation

OpenClaw-CLEO

Super-powered OpenClaw installer for Proxmox, powered by CLEO task management.

A comprehensive automation framework for deploying OpenClaw personal AI assistant on self-hosted infrastructure with enterprise-grade security.

Prerequisites

Before installation, ensure you have:

Requirement Details
Proxmox VE 8.1+ Primary tested platform (LXC container host)
Reverse Proxy NGINX Proxy Manager recommended for SSL/WebSocket support
Doppler Account Secrets management - Sign up with referral
Domain Name For external access (optional but recommended)
10GB+ Storage For LXC container and dependencies

Supported Platforms

Platform Status Notes
Proxmox VE ✅ Primary Fully tested on v8.1+
LXD 🟡 Community Compatible but not officially tested
Incus 🟡 Community Compatible but not officially tested
Vultr, Kamatera, Kinsta 🟡 Community VPS providers with LXC support
DigitalOcean, Linode 🟡 Community Docker-based deployments
TrueNAS SCALE 🟡 Community LXC support via Apps
Unraid 🟡 Community Docker deployment

Quick Start

Proxmox VE Shell (One-Liner)

bash -c "$(wget -qLO - https://raw.githubusercontent.com/kryptobaseddev/openclaw-cleo/main/scripts/install.sh)"

With advanced options:

bash -c "$(wget -qLO - https://raw.githubusercontent.com/kryptobaseddev/openclaw-cleo/main/scripts/install.sh)" -- --advanced

With Doppler token pre-configured:

bash -c "$(wget -qLO - https://raw.githubusercontent.com/kryptobaseddev/openclaw-cleo/main/scripts/install.sh)" -- --doppler-token dp.st.prd.XXXXX

See detailed installation guide: Installation Documentation (coming soon)

What Gets Installed

Component Version Purpose
Debian 12 LXC base OS
Node.js 22 Runtime
pnpm Latest Package manager
Docker Latest Container runtime
Doppler CLI Latest Secrets management
OpenClaw Fork AI assistant (kryptobaseddev/openclaw)

Post-Install Configuration

After installation completes, configure the following:

1. Doppler Secrets Management

Set up centralized secrets management (no .env files):

📘 Doppler Setup Guide

Required Secrets:

Secret Name Description How to Get
ANTHROPIC_API_KEY Claude API key (primary LLM) console.anthropic.com
OPENCLAW_GATEWAY_TOKEN Gateway auth token openssl rand -hex 32

Email Identity (for autonomous account signups & verification):

Secret Name Description How to Get
AGENTMAIL_API_KEY AgentMail API for persistent email agentmail.to/dashboard
AGENTMAIL_EMAIL Agent's email address e.g., openclawcleo@agentmail.to

Memory Search (for semantic memory retrieval - pick one):

Secret Name Description How to Get
OPENAI_API_KEY OpenAI embeddings for memory search platform.openai.com
GOOGLE_API_KEY Google AI/Gemini for memory search aistudio.google.com

Search & Social:

Secret Name Description How to Get
BRAVE_API_KEY Web search capabilities brave.com/search/api
MOLTBOOK_API_KEY AI agent social network moltbook.com

Development & Integration:

Secret Name Description How to Get
GITHUB_PAT GitHub Personal Access Token for API access, private repos, PR operations github.com/settings/tokens

Communication Channels (optional):

Secret Name Description How to Get
TELEGRAM_BOT_TOKEN Telegram bot integration See Telegram guide
DISCORD_BOT_TOKEN Discord bot integration See Discord guide

2. Communication Channels

Enable Telegram and/or Discord for remote control:

3. Secure External Access

Configure reverse proxy for HTTPS and WebSocket support:

Features

  • One-liner Proxmox installer - tteck-style LXC provisioning
  • Doppler secrets management - No .env files, centralized secrets
  • CLEO task integration - RCSD/IVTR lifecycle protocols
  • NGINX Proxy Manager - Secure external access with SSL
  • Built from fork - Uses kryptobaseddev/openclaw
  • Multi-channel support - Telegram and Discord bots
  • Docker-based - Isolated runtime environment

Architecture

┌─────────────────────────────────────────────────────────────┐
│                     PROXMOX HOST                            │
├─────────────────────────────────────────────────────────────┤
│                                                             │
│  ┌─────────────────────────────────────────────────────┐   │
│  │           OpenClaw LXC Container                     │   │
│  │                                                       │   │
│  │  ┌─────────────┐    ┌──────────────────────────┐    │   │
│  │  │ Doppler CLI │───▶│ Secrets from Doppler     │    │   │
│  │  └─────────────┘    │ - ANTHROPIC_API_KEY      │    │   │
│  │         │           │ - GATEWAY_TOKEN          │    │   │
│  │         ▼           │ - TELEGRAM_BOT_TOKEN     │    │   │
│  │  ┌─────────────┐    └──────────────────────────┘    │   │
│  │  │   Docker    │                                     │   │
│  │  │  Container  │◀─── Built from fork                 │   │
│  │  │  (OpenClaw) │     kryptobaseddev/openclaw         │   │
│  │  └──────┬──────┘                                     │   │
│  │         │ :18789                                     │   │
│  └─────────┼────────────────────────────────────────────┘   │
│            │                                                 │
│            ▼                                                 │
│  ┌─────────────────────────────────────────────────────┐   │
│  │         NGINX Proxy Manager                          │   │
│  │         SSL/TLS Termination                          │   │
│  │         Rate Limiting                                │   │
│  └─────────────────────────────────────────────────────┘   │
│            │                                                 │
└────────────┼─────────────────────────────────────────────────┘
             │
             ▼
        External Access
        https://openclaw.yourdomain.com

Scripts

Script Purpose
scripts/install.sh Main installer - Run in Proxmox VE Shell
scripts/provision-lxc.sh Manual LXC container provisioning
scripts/setup-docker-deps.sh Install Docker, Node.js, dependencies
scripts/generate-gateway-config.sh Generate OpenClaw configuration
scripts/openclaw-full-setup.sh Master orchestration script

CLEO Integration

This project includes a CLEO skill for OpenClaw, enabling task management with RCSD/IVTR lifecycle protocols.

# Inside OpenClaw, the CLEO skill provides:
cleo find "query"           # Task discovery
cleo show T1234             # Task details
cleo complete T1234         # Complete tasks
cleo session start/end      # Session management

See skills/cleo/SKILL.md for full documentation.

Documentation

Setup Guides

Reference Documentation

AgentMail Integration

OpenClaw includes persistent email identity through AgentMail:

Agent Email: openclawcleo@agentmail.to

Capabilities

  • Account Signups - Register for services with agent-controlled email
  • Email Verification - Complete verification workflows autonomously
  • Persistent Identity - Stable email address across sessions
  • Agent Communication - Receive and respond to emails programmatically

Configuration

Add to your Doppler secrets:

Secret Name Description Required
AGENTMAIL_API_KEY AgentMail API access Yes
AGENTMAIL_EMAIL Agent's email identity Yes
ANTHROPIC_API_KEY Claude API access Yes

Setup in Doppler:

# From /opt/openclaw directory
doppler secrets set AGENTMAIL_API_KEY --value "your-api-key"
doppler secrets set AGENTMAIL_EMAIL --value "openclawcleo@agentmail.to"

Get API Key: agentmail.to/dashboard

CLEO as Cognitive Architecture

OpenClaw uses CLEO not just for task management, but as an externalized cognitive framework - a neural brain for AI agents.

Core Principles

Persistent Goals Across Sessions

  • Tasks survive context window resets
  • Agent maintains long-term objectives
  • Work continues from where it left off

Extreme Context Efficiency

  • ct find vs ct list = 99% token savings
  • Minimal fields for discovery, full details on demand
  • Intelligent query before expand

Systematic Reasoning Protocols

  • RCSD Pipeline: Research → Consensus → Specification → Decomposition
  • Execution Flow: Implementation → Validation → Testing → Release
  • Prevents "jumping to code" anti-pattern
  • Ensures evidence-based decision making

Multi-Agent Coordination

  • 2-tier architecture: Orchestrator + Universal Subagent
  • Protocol injection for task-specific skills
  • Manifest-based communication (not context passing)
  • Parallel execution with dependency management

Self-Improvement Loop

  • Agents document their own protocols
  • Validation gates prevent regression
  • Testing frameworks ensure quality
  • Release management tracks evolution

Why This Matters

Traditional AI agents lose context between sessions and make decisions without systematic reasoning. CLEO provides:

  1. Memory - Persistent task state
  2. Process - RCSD/IVTR protocols
  3. Efficiency - Context-optimized queries
  4. Coordination - Multi-agent workflows
  5. Evolution - Self-documenting improvement

This transforms AI from "smart autocomplete" to "systematic reasoning system with memory."

The Neural Brain Model

CLEO implements a PageIndex-inspired vectorless RAG that achieves ~98.7% accuracy vs ~30-50% for traditional vector search. The key insight: "Similarity does not equal relevance - what we truly need in retrieval is relevance, and that requires reasoning."

Neural Concept CLEO Implementation
Neurons Tasks (spanning all projects)
Synapses relates field entries (knowledge graph edges)
Weights Hierarchy boosts (sibling +0.15, cousin +0.08)
Activation Similarity scores 0.0-1.0
Memory Decay Context propagation: self=1.0 → parent=0.5 → grandparent=0.25

Graph-RAG Capabilities

Persistent Memory

  • Tasks survive context window resets
  • Graph-based semantic retrieval via LCA (Lowest Common Ancestor)
  • O(1) lookup with dual-index caching

Five Discovery Methods

  • Label-based (Jaccard similarity on shared tags)
  • Description-based (keyword extraction + stopword removal)
  • File-based (relationship through shared code files)
  • Hierarchy-based (LCA + tree distance)
  • Auto mode (merges all with hierarchy boosting)

Cross-Project Intelligence (Nexus)

cleo nexus init                    # Initialize global brain
cleo nexus register . --name app   # Register project
cleo nexus discover T001 --limit 5 # Cross-project search

Comparison

Traditional AI CLEO-Powered AI
Amnesia between sessions Persistent task memory
Impulsive solutions RCSD systematic reasoning
Isolated agents Multi-agent orchestration
Bloated context O(1) graph lookups

Full Architecture Details: docs/cleo-cognitive-architecture.md

Troubleshooting

Common Issues

Issue Solution
Container won't start Check Proxmox logs: pct status <CTID>
Doppler authentication fails Verify service token: doppler secrets --project openclaw --config prd
WebSocket connection fails Enable WebSocket support in reverse proxy
Docker build fails Check internet connectivity and disk space

Full troubleshooting: (coming soon)

Requirements

  • Proxmox VE 7.0+ or 8.x
  • 10GB+ storage for LXC container
  • Internet connectivity
  • Doppler account (free tier works) - Sign up here

Related Projects

Contributing

Contributions welcome! See CONTRIBUTING.md for guidelines. (coming soon)

License

MIT License - See LICENSE

Support

About

Super-powered OpenClaw installer for Proxmox, powered by CLEO task management. Includes Doppler secrets, NGINX Proxy Manager integration, and automated LXC provisioning.

Resources

Readme
Activity

Stars

3 stars

Watchers

0 watching

Forks

1 fork
Report repository

Releases

No releases published

Packages

No packages published

Contributors 2

  •  
  •  

Languages