OpenClaw怎么配置模型允许局域网访问

{
  meta: {
    lastTouchedVersion: '2026.3.13',
    lastTouchedAt: '2026-03-18T08:43:02.682Z',
  },
  wizard: {
    lastRunAt: '2026-03-18T07:31:09.135Z',
    lastRunVersion: '2026.3.13',
    lastRunCommand: 'onboard',
    lastRunMode: 'local',
  },
  models: {
    providers: {
      lmstudio: {
        baseUrl: 'http://10.0.71.31:1234/v1',
        apiKey: '__OPENCLAW_REDACTED__',
        api: 'openai-completions',
        models: [
          {
            id: 'qwen3.5-4b',
            name: 'Qwen 3.5 4B (LM Studio)',
            api: 'openai-completions',
            reasoning: false,
            input: [
              'text',
            ],
            cost: {
              input: 0,
              output: 0,
              cacheRead: 0,
              cacheWrite: 0,
            },
            contextWindow: 32768,
            maxTokens: 16384,
          },
        ],
      },
    },
  },
  agents: {
    defaults: {
      model: {
        primary: 'lmstudio/qwen3.5-4b',
      },
      workspace: '/Users/dengzemiao/.openclaw/workspace',
      compaction: {
        mode: 'safeguard',
      },
    },
  },
  tools: {
    profile: 'coding',
  },
  commands: {
    native: 'auto',
    nativeSkills: 'auto',
    restart: true,
    ownerDisplay: 'raw',
  },
  session: {
    dmScope: 'per-channel-peer',
  },
  gateway: {
    port: 18789,
    mode: 'local',
    bind: 'lan',
    controlUi: {
      allowedOrigins: [
        'http://localhost:18789',
        'http://127.0.0.1:18789',
        'http://10.0.91.97:18789',
      ],
      dangerouslyAllowHostHeaderOriginFallback: true,
      allowInsecureAuth: true,
      dangerouslyDisableDeviceAuth: true,
    },
    auth: {
      mode: 'token',
      token: '__OPENCLAW_REDACTED__',
    },
    tailscale: {
      mode: 'off',
      resetOnExit: false,
    },
    remote: {
      url: 'wss://10.0.91.97:18789',
    },
    nodes: {
      denyCommands: [
        'camera.snap',
        'camera.clip',
        'screen.record',
        'contacts.add',
        'calendar.add',
        'reminders.add',
        'sms.send',
      ],
    },
  },
}

模型配置主要关注:modelsagents

局域网访问主要关注:gatewayauthremote

改监听地址从127.0.0.1到0.0.0.0就行

局域网访问记得配防火墙入站规则

安全起见建议加个认证机制

nginx反代加basic auth比较稳

@frzyx 加认证机制很必要 最简单的方案是nginx加basic auth 在nginx配置里加上auth_basic和auth_basic_user_file两行就行 比改OpenClaw配置简单

@trblx 防火墙入站规则补充一下 只开放OpenClaw用的那个端口 别图省事开放all ports 局域网里也可能有不安全的设备

MySQL到8.0变化不小,升级前测试充分点

野孩子喜欢折腾这种边缘场景