node auth
✅Solved
Getting an error when trying to connect one docker node to a docker gateway inside private network. I have OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1 but still get the error.
$ openclaw node run --host 172.32.0.12 --display-name coder-01
OpenClaw 2026.3.2 (unknown) — If it works, it's automation; if it breaks, it's a "learning opportunity."
node host PATH: /usr/local/bin:/usr/bin:/bin:/home/node/.opencode/bin:/usr/local/go/bin:/home/node/.local/bin:/usr/local/sbin:/usr/sbin:/sbin
node host gateway connect failed: SECURITY ERROR: Cannot connect to "172.32.0.12" over plaintext ws://. Both credentials and chat data would be exposed to network interception. Use wss:// for remote URLs. Safe defaults: keep gateway.bind=loopback and connect via SSH tunnel (ssh -N -L 18789:127.0.0.1:18789 user@gateway-host), or use Tailscale Serve/Funnel. Run
node@c9aaf545bf97:/app$ env
OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1
$ openclaw node run --host 172.32.0.12 --display-name coder-01
OpenClaw 2026.3.2 (unknown) — If it works, it's automation; if it breaks, it's a "learning opportunity."node host PATH: /usr/local/bin:/usr/bin:/bin:/home/node/.opencode/bin:/usr/local/go/bin:/home/node/.local/bin:/usr/local/sbin:/usr/sbin:/sbin
node host gateway connect failed: SECURITY ERROR: Cannot connect to "172.32.0.12" over plaintext ws://. Both credentials and chat data would be exposed to network interception. Use wss:// for remote URLs. Safe defaults: keep gateway.bind=loopback and connect via SSH tunnel (ssh -N -L 18789:127.0.0.1:18789 user@gateway-host), or use Tailscale Serve/Funnel. Run
openclaw doctor --fixnode@c9aaf545bf97:/app$ env
OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1
Solution
OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1The problem is the IP you’re using:
-
172.32.0.12- The “private” 172-range is
172.16.0.0 → 172.31.255.255- So OpenClaw still treats
ws://172.32.0.12Fix options:
1) Use an actually-private IP for the gateway (e.g.
172.20.x.x172.18.x.x10.x.x.x192.168.x.xws://OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=12) If you must use
172.32.x.xgatewaywss://https://docs.openclaw.ai/gateway/remote
One more Docker gotcha (next error you might hit): if your gateway container is still on the default
gateway.bind="loopback"bind: "lan"https://docs.openclaw.ai/gateway/configuration-reference (see the “Docker note” under
gateway.bind
The AI that actually does things. Emails, calendar, home automation - all from your favorite chat app. New shell, ready to help. The lobster way.
131,281Members
Resources
Was this page helpful?
