# Example only.
# Use this as a pattern if you want OpenClaw managed in a separate repo or compose project.
# The important part is the same separation model as Hermes:
# - localhost-bound host ports
# - own state directory
# - own private network
# - optional shared network
# - external br0-backed uplink network for LAN/Internet
services:
  openclaw:
    image: ghcr.io/example/openclaw:latest
    container_name: openclaw
    restart: unless-stopped
    ports:
      - "127.0.0.1:18080:8080"
    environment:
      TZ: Europe/Berlin
    volumes:
      - ./state/openclaw:/app/data
    security_opt:
      - no-new-privileges:true
    mem_limit: 4g
    cpus: 2.0
    networks:
      - openclaw_private
      - agents_shared
      - br0_uplink

networks:
  openclaw_private:
    name: openclaw_private
    driver: bridge
  agents_shared:
    name: alan_agents_shared
    external: true
  br0_uplink:
    name: br0_lan
    external: true