Update start-openclaw.sh

start-openclaw.sh

@@ -24,11 +24,7 @@ echo "nameserver 8.8.8.8" >> /etc/resolv.conf
 echo "nameserver 8.8.4.4" >> /etc/resolv.conf
 echo ">>> DNS fixed."
 
-# ── 4. Install nginx ──────────────────────────────────────────
-apt-get install -y --no-install-recommends nginx > /dev/null 2>&1
-echo ">>> nginx installed."
-
-# ── 5. Chromium ───────────────────────────────────────────────
+# ── 4. Chromium ───────────────────────────────────────────────
 export PLAYWRIGHT_BROWSERS_PATH=/root/.openclaw/browsers
 CHROMIUM_PATH=$(find /root/.openclaw/browsers -name "chrome" -type f 2>/dev/null | head -1)
 
@@ -36,9 +32,7 @@ if [ -z "$CHROMIUM_PATH" ]; then
     echo ">>> Installing Chromium..."
     OPENCLAW_NM=$(npm root -g 2>/dev/null)/openclaw/node_modules/playwright-core/cli.js
     if timeout 180 node "$OPENCLAW_NM" install chromium; then
-        echo ">>> Chromium OK (npm global)"
-    elif timeout 180 node /usr/local/lib/node_modules/openclaw/node_modules/playwright-core/cli.js install chromium; then
-        echo ">>> Chromium OK (local)"
+        echo ">>> Chromium OK"
     else
         echo ">>> WARN: Chromium install failed"
     fi
@@ -47,12 +41,16 @@ else
     echo ">>> Chromium found: $CHROMIUM_PATH"
 fi
 
-# ── 6. Generate openclaw.json (OpenClaw di port 7862) ─────────
+# ── 5. Bersihkan OPENAI_API_BASE ──────────────────────────────
 CLEAN_BASE=$(echo "$OPENAI_API_BASE" \
   | sed "s|/chat/completions||g" \
   | sed "s|/v1/|/v1|g" \
   | sed "s|/v1$|/v1|g")
 
+# ── 6. Generate openclaw.json ─────────────────────────────────
+# OpenClaw gateway di port 7862 (internal)
+# Telegram webhook listener di port 8787 (internal, OpenClaw native)
+# Node.js proxy di port 7860 (public HF Spaces) — route berdasarkan path
 cat > /root/.openclaw/openclaw.json <<EOF
 {
   "models": {
@@ -69,23 +67,7 @@ cat > /root/.openclaw/openclaw.json <<EOF
   },
   "agents": {
     "defaults": {
-      "model": { "primary": "nvidia/$MODEL" },
-      "tools": {
-        "fetch": { "enabled": true },
-        "computer": { "enabled": true },
-        "browser": { "enabled": true }
-      }
-    }
-  },
-  "channels": {
-    "telegram": {
-      "enabled": true,
-      "botToken": "$TELEGRAM_BOT_TOKEN",
-      "dmPolicy": "open",
-      "webhookUrl": "https://mark421-openclaw-ai.hf.space/telegram/webhook",
-      "webhookSecret": "$OPENCLAW_GATEWAY_PASSWORD",
-      "webhookHost": "0.0.0.0",
-      "webhookPort": 8787
+      "model": { "primary": "nvidia/$MODEL" }
     }
   },
   "commands": { "restart": true },
@@ -93,14 +75,6 @@ cat > /root/.openclaw/openclaw.json <<EOF
     "enabled": true,
     "headless": true,
     "noSandbox": true,
-    "chromiumArgs": [
-      "--no-sandbox",
-      "--disable-setuid-sandbox",
-      "--disable-dev-shm-usage",
-      "--disable-gpu",
-      "--dns-prefetch-disable",
-      "--ignore-certificate-errors"
-    ],
     "executablePath": "$CHROMIUM_PATH",
     "defaultProfile": "openclaw",
     "ssrfPolicy": { "dangerouslyAllowPrivateNetwork": true },
@@ -111,6 +85,19 @@ cat > /root/.openclaw/openclaw.json <<EOF
       }
     }
   },
+  "channels": {
+    "telegram": {
+      "enabled": true,
+      "botToken": "$TELEGRAM_BOT_TOKEN",
+      "dmPolicy": "open",
+      "webhookUrl": "https://mark421-openclaw-ai.hf.space/telegram/webhook",
+      "webhookSecret": "$OPENCLAW_GATEWAY_PASSWORD",
+      "webhookPath": "/telegram/webhook",
+      "webhookHost": "0.0.0.0",
+      "webhookPort": 8787,
+      "streaming": "partial"
+    }
+  },
   "gateway": {
     "mode": "local",
     "bind": "lan",
@@ -131,39 +118,54 @@ cat > /root/.openclaw/openclaw.json <<EOF
   }
 }
 EOF
-echo ">>> openclaw.json generated (OpenClaw on port 7862)."
-
-# ── 7. Nginx config — reverse proxy di port 7860 ──────────────
-cat > /etc/nginx/nginx.conf <<'NGINXCONF'
-events { worker_connections 1024; }
-http {
-  server {
-    listen 7860;
-
-    # Telegram webhook native OpenClaw → port 8787
-    location /telegram/webhook {
-      proxy_pass http://localhost:8787;
-      proxy_set_header Host $host;
-      proxy_read_timeout 30s;
-    }
-
-    # Semua traffic lain → OpenClaw gateway
-    location / {
-      proxy_pass http://localhost:7862;
-      proxy_set_header Host $host;
-      proxy_set_header X-Real-IP $remote_addr;
-      proxy_read_timeout 300s;
-      proxy_buffering off;
-    }
-  }
+echo ">>> openclaw.json generated."
+
+# ── 7. Node.js reverse proxy di port 7860 ─────────────────────
+# Route /telegram/webhook → OpenClaw webhook (8787)
+# Route semua lain → OpenClaw gateway (7862)
+node -e "
+const http = require('http');
+
+function proxy(req, res, targetPort) {
+  const options = {
+    hostname: '127.0.0.1',
+    port: targetPort,
+    path: req.url,
+    method: req.method,
+    headers: req.headers,
+  };
+  const proxyReq = http.request(options, (proxyRes) => {
+    res.writeHead(proxyRes.statusCode, proxyRes.headers);
+    proxyRes.pipe(res, { end: true });
+  });
+  proxyReq.on('error', (e) => {
+    console.error('Proxy error:', e.message);
+    res.writeHead(502);
+    res.end('Bad gateway');
+  });
+  req.pipe(proxyReq, { end: true });
 }
-NGINXCONF
 
-nginx
-echo ">>> nginx started on port 7860."
+http.createServer((req, res) => {
+  if (req.url.startsWith('/telegram/webhook')) {
+    proxy(req, res, 8787); // OpenClaw native Telegram webhook
+  } else {
+    proxy(req, res, 7862); // OpenClaw gateway UI + API
+  }
+}).listen(7860, '0.0.0.0', () => {
+  console.log('Proxy listening on port 7860');
+  console.log('  /telegram/webhook → localhost:8787 (OpenClaw Telegram)');
+  console.log('  /* → localhost:7862 (OpenClaw gateway)');
+});
+" &
+echo ">>> Node.js proxy started on port 7860."
 
 # ── 8. Backup otomatis setiap 1 jam ──────────────────────────
-(while true; do sleep 3600; python3 /app/sync.py backup; done) &
+(while true; do
+  sleep 3600
+  echo ">>> Running scheduled backup..."
+  python3 /app/sync.py backup
+done) &
 
 # ── 9. Jalankan OpenClaw di port 7862 ────────────────────────
 echo ">>> Running openclaw doctor --fix..."