{"id":124241,"date":"2026-04-03T14:08:22","date_gmt":"2026-04-03T07:08:22","guid":{"rendered":"https:\/\/tino.vn\/blog\/?p=124241"},"modified":"2026-10-24T17:53:45","modified_gmt":"2026-10-24T10:53:45","slug":"rui-ro-bao-mat-khi-dung-openclaw","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/rui-ro-bao-mat-khi-dung-openclaw\/","title":{"rendered":"R\u1ee7i ro b\u1ea3o m\u1eadt khi d\u00f9ng OpenClaw: 7 r\u1ee7i ro v\u00e0 12 c\u00e1ch ph\u00f2ng tr\u00e1nh"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>OpenClaw an to\u00e0n \u0111\u1ebfn \u0111\u00e2u l\u00e0 do c\u00e1ch b\u1ea1n c\u1ea5u h\u00ecnh. Gateway m\u1eb7c \u0111\u1ecbnh ch\u1ec9 nghe tr\u00ean 127.0.0.1, b\u1eaft bu\u1ed9c token v\u00e0 b\u1eaft ng\u01b0\u1eddi l\u1ea1 qua b\u01b0\u1edbc pairing; nh\u01b0ng sandbox t\u1eaft m\u1eb7c \u0111\u1ecbnh, n\u00ean tool agent \u0111\u01b0\u1ee3c ph\u00e9p d\u00f9ng s\u1ebd ch\u1ea1y th\u1eb3ng tr\u00ean m\u00e1y v\u1edbi quy\u1ec1n c\u1ee7a t\u00e0i kho\u1ea3n ch\u1ea1y Gateway.<\/strong> R\u1ee7i ro l\u1edbn nh\u1ea5t \u0111\u1ebfn t\u1eeb c\u1ed5ng Gateway l\u1ed9 ra Internet, tin nh\u1eafn v\u00e0 n\u1ed9i dung ch\u1ee9a l\u1ec7nh gi\u1ea5u, skill \u0111\u1ed9c h\u1ea1i v\u00e0 API key l\u01b0u d\u1ea1ng th\u00f4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">B\u00e0i n\u00e0y d\u00e0nh cho ng\u01b0\u1eddi \u0111\u00e3 hi\u1ec3u <a href=\"https:\/\/tino.vn\/blog\/openclaw-la-gi\/\">OpenClaw l\u00e0 g\u00ec<\/a> v\u00e0 chu\u1ea9n b\u1ecb ch\u1ea1y th\u1eadt. N\u1ebfu b\u1ea1n c\u00e0i tr\u00ean VPS, l\u00e0m song song v\u1edbi h\u01b0\u1edbng d\u1eabn <a href=\"https:\/\/tino.vn\/blog\/cai-dat-openclaw-tren-vps\/\">c\u00e0i \u0111\u1eb7t OpenClaw tr\u00ean VPS<\/a>, v\u00ec ph\u1ea7n l\u1edbn l\u1ed7i b\u1ea3o m\u1eadt sinh ra ngay \u1edf b\u01b0\u1edbc c\u00e0i.<\/p>\n\n\n\n<h2 id=\"V\u00ec_sao_OpenClaw_c\u1ea7n_\u0111\u01b0\u1ee3c_b\u1ea3o_m\u1eadt_k\u1ef9_h\u01a1n_chatbot_th\u01b0\u1eddng?\">V\u00ec sao OpenClaw c\u1ea7n \u0111\u01b0\u1ee3c b\u1ea3o m\u1eadt k\u1ef9 h\u01a1n chatbot th\u01b0\u1eddng?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw c\u1ea7n b\u1ea3o m\u1eadt k\u1ef9 h\u01a1n chatbot th\u01b0\u1eddng v\u00ec n\u00f3 h\u00e0nh \u0111\u1ed9ng \u0111\u01b0\u1ee3c: \u0111\u1ecdc ghi t\u1ec7p, ch\u1ea1y l\u1ec7nh, m\u1edf tr\u00ecnh duy\u1ec7t, g\u1eedi tin nh\u1eafn, gi\u1eef API key v\u00e0 token c\u1ee7a nhi\u1ec1u d\u1ecbch v\u1ee5. M\u1ed9t l\u1ec7nh b\u1ecb thao t\u00fang kh\u00f4ng ch\u1ec9 cho ra c\u00e2u tr\u1ea3 l\u1eddi sai m\u00e0 c\u00f3 th\u1ec3 xo\u00e1 d\u1eef li\u1ec7u, g\u1eedi th\u01b0 gi\u1ea3 m\u1ea1o ho\u1eb7c l\u00e0m l\u1ed9 kho\u00e1 truy c\u1eadp.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>D\u1eef li\u1ec7u \u0111i qua OpenClaw th\u01b0\u1eddng nh\u1ea1y c\u1ea3m: API key, email, t\u00e0i li\u1ec7u n\u1ed9i b\u1ed9, l\u1ecbch s\u1eed chat.<\/li>\n\n\n<li>M\u1ed7i k\u00eanh, d\u1ecbch v\u1ee5 \u0111\u01b0\u1ee3c n\u1ed1i th\u00eam m\u1edf r\u1ed9ng ph\u1ea1m vi thi\u1ec7t h\u1ea1i n\u1ebfu m\u1ed9t \u0111i\u1ec3m b\u1ecb chi\u1ebfm.<\/li>\n\n\n<li>D\u1ef1 \u00e1n ph\u00e1t tri\u1ec3n nhanh v\u00e0 c\u00f3 nhi\u1ec1u c\u1ea3nh b\u00e1o b\u1ea3o m\u1eadt c\u00f4ng khai tr\u00ean <a href=\"https:\/\/github.com\/openclaw\/openclaw\/security\/advisories\" target=\"_blank\" rel=\"noopener nofollow\">GitHub Security Advisories<\/a>; b\u1ea3n c\u0169 d\u1ec5 d\u00ednh l\u1ed7i \u0111\u00e3 \u0111\u01b0\u1ee3c v\u00e1.<\/li>\n\n\n<li>Docs n\u00f3i r\u00f5 OpenClaw kh\u00f4ng ph\u1ea3i ranh gi\u1edbi b\u1ea3o m\u1eadt gi\u1eefa nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng tin nhau: m\u1ed7i Gateway l\u00e0 m\u1ed9t ranh gi\u1edbi tin c\u1eady.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"V\u00ec_sao_b\u1ea3o_m\u1eadt_hay_b\u1ecb_b\u1ecf_qua_khi_m\u1edbi_c\u00e0i_OpenClaw?\">V\u00ec sao b\u1ea3o m\u1eadt hay b\u1ecb b\u1ecf qua khi m\u1edbi c\u00e0i OpenClaw?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea3o m\u1eadt hay b\u1ecb b\u1ecf qua v\u00ec ng\u01b0\u1eddi c\u00e0i mu\u1ed1n &#8220;ch\u1ea1y \u0111\u01b0\u1ee3c tr\u01b0\u1edbc \u0111\u00e3&#8221;: m\u1edf c\u1ed5ng ra ngo\u00e0i \u0111\u1ec3 v\u00e0o cho nhanh, t\u1eaft b\u1edbt x\u00e1c th\u1ef1c khi g\u1eb7p l\u1ed7i, c\u1ea5p quy\u1ec1n r\u1ed9ng l\u00fac th\u1eed r\u1ed3i qu\u00ean thu h\u1ed3i.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Truy c\u1eadp Control UI b\u1eb1ng <code>http:\/\/IP-VPS:18789<\/code> thay v\u00ec SSH tunnel hay Tailscale.<\/li>\n\n\n<li>G\u1eb7p l\u1ed7i &#8220;origin not allowed&#8221; th\u00ec \u0111\u1eb7t <code>allowedOrigins: [\"*\"]<\/code> theo h\u01b0\u1edbng d\u1eabn tr\u00ean m\u1ea1ng.<\/li>\n\n\n<li>\u0110\u1ec3 DM policy l\u00e0 <code>open<\/code> cho ti\u1ec7n th\u1eed, sau \u0111\u00f3 kh\u00f4ng \u0111\u1ed5i l\u1ea1i.<\/li>\n\n\n<li>C\u00e0i skill h\u00e0ng lo\u1ea1t t\u1eeb ClawHub m\u00e0 kh\u00f4ng \u0111\u1ecdc n\u1ed9i dung.<\/li>\n\n\n<li>Kh\u00f4ng c\u1eadp nh\u1eadt OpenClaw v\u00ec s\u1ee3 l\u1ed7i, gi\u1eef b\u1ea3n c\u00f3 l\u1ed7 h\u1ed5ng \u0111\u00e3 c\u00f4ng b\u1ed1.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"7_r\u1ee7i_ro_b\u1ea3o_m\u1eadt_khi_d\u00f9ng_OpenClaw\">7 r\u1ee7i ro b\u1ea3o m\u1eadt khi d\u00f9ng OpenClaw<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea3y r\u1ee7i ro d\u01b0\u1edbi \u0111\u00e2y gom theo \u0111\u01b0\u1eddng m\u00e0 k\u1ebb x\u1ea5u c\u00f3 th\u1ec3 \u0111i v\u00e0o m\u00e1y ch\u1ea1y OpenClaw: m\u1ea1ng, k\u00eanh chat, n\u1ed9i dung agent \u0111\u1ecdc, ph\u1ea7n m\u1edf r\u1ed9ng v\u00e0 b\u00ed m\u1eadt l\u01b0u tr\u00ean \u0111\u0129a.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1400\" height=\"750\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/rui-ro-bao-mat-khi-dung-openclaw-be-mat.webp\" alt=\"S\u01a1 \u0111\u1ed3 5 \u0111\u01b0\u1eddng v\u00e0o m\u00e1y ch\u1ea1y OpenClaw: c\u1ed5ng 18789 l\u1ed9 ra Internet, ng\u01b0\u1eddi l\u1ea1 nh\u1eafn bot, l\u1ec7nh gi\u1ea5u trong web v\u00e0 email, skill plugin \u0111\u1ed9c h\u1ea1i, API key token tr\u00ean \u0111\u0129a; m\u1ed7i \u0111\u01b0\u1eddng k\u00e8m bi\u1ec7n ph\u00e1p ch\u1eb7n\" class=\"wp-image-132040\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/rui-ro-bao-mat-khi-dung-openclaw-be-mat.webp 1400w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/rui-ro-bao-mat-khi-dung-openclaw-be-mat-300x161.webp 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/rui-ro-bao-mat-khi-dung-openclaw-be-mat-1024x549.webp 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/rui-ro-bao-mat-khi-dung-openclaw-be-mat-768x411.webp 768w\" sizes=\"(max-width: 1400px) 100vw, 1400px\" \/><\/figure>\n\n\n\n<h3 id=\"1._C\u1ed5ng_Gateway_18789_l\u1ed9_ra_Internet\">1. C\u1ed5ng Gateway 18789 l\u1ed9 ra Internet<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Gateway g\u1ed9p WebSocket v\u00e0 Control UI tr\u00ean m\u1ed9t c\u1ed5ng, m\u1eb7c \u0111\u1ecbnh 18789. Ai v\u00e0o \u0111\u01b0\u1ee3c c\u1ed5ng n\u00e0y v\u00e0 c\u00f3 token l\u00e0 \u0111i\u1ec1u khi\u1ec3n \u0111\u01b0\u1ee3c agent. Docs khuy\u1ebfn c\u00e1o kh\u00f4ng m\u1edf c\u1ed5ng ra Internet; truy c\u1eadp t\u1eeb xa b\u1eb1ng SSH tunnel, Tailscale ho\u1eb7c reverse proxy c\u00f3 x\u00e1c th\u1ef1c (<a href=\"https:\/\/docs.openclaw.ai\/help\/faq\/gateway-ports-and-remote-mode\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw: Gateway ports and remote mode<\/a>). L\u01b0u \u00fd: image Docker m\u1eb7c \u0111\u1ecbnh bind ra ngo\u00e0i container v\u00e0 Docker Compose publish c\u1ed5ng tr\u00ean m\u1ecdi IP c\u1ee7a VPS.<\/p>\n\n\n\n<h3 id=\"2._Ng\u01b0\u1eddi_l\u1ea1_nh\u1eafn_bot_ho\u1eb7c_bot_n\u1eb1m_trong_nh\u00f3m_c\u00f4ng_khai\">2. Ng\u01b0\u1eddi l\u1ea1 nh\u1eafn bot ho\u1eb7c bot n\u1eb1m trong nh\u00f3m c\u00f4ng khai<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Ai nh\u1eafn \u0111\u01b0\u1ee3c bot l\u00e0 \u0111\u01b0a \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u cho agent. DM policy <code>open<\/code>, nh\u00f3m kh\u00f4ng y\u00eau c\u1ea7u mention hay allowlist theo t\u00ean hi\u1ec3n th\u1ecb (d\u1ec5 gi\u1ea3) \u0111\u1ec1u m\u1edf \u0111\u01b0\u1eddng cho ng\u01b0\u1eddi l\u1ea1 ra l\u1ec7nh.<\/p>\n\n\n\n<h3 id=\"3._Prompt_injection_qua_web,_email,_t\u1ec7p\">3. Prompt injection qua web, email, t\u1ec7p<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Prompt injection l\u00e0 l\u1ec7nh gi\u1ea5u trong n\u1ed9i dung agent \u0111\u1ecdc: ch\u1eef tr\u1eafng tr\u00ean n\u1ec1n tr\u1eafng trong trang web, ch\u1eef k\u00fd email, t\u00e0i li\u1ec7u \u0111\u00ednh k\u00e8m. Agent c\u00f3 th\u1ec3 hi\u1ec3u nh\u1ea7m \u0111\u00f3 l\u00e0 ch\u1ec9 th\u1ecb v\u00e0 g\u1eedi d\u1eef li\u1ec7u \u0111i ho\u1eb7c s\u1eeda h\u1ec7 th\u1ed1ng. Docs n\u00f3i r\u00f5 OpenClaw ch\u1ec9 gi\u1ea3m \u0111\u01b0\u1ee3c m\u1ed9t ph\u1ea7n; b\u1ea1n v\u1eabn ph\u1ea3i gi\u1edbi h\u1ea1n tool v\u00e0 th\u00eam b\u01b0\u1edbc duy\u1ec7t (<a href=\"https:\/\/docs.openclaw.ai\/gateway\/security\/prompt-injection\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw: Prompt injection<\/a>).<\/p>\n\n\n\n<h3 id=\"4._Skill_v\u00e0_plugin_\u0111\u1ed9c_h\u1ea1i\">4. Skill v\u00e0 plugin \u0111\u1ed9c h\u1ea1i<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">ClawHub l\u00e0 kho m\u1edf. Th\u00e1ng 2\/2026, Koi Security qu\u00e9t 2.857 skill v\u00e0 t\u00ecm th\u1ea5y 341 skill \u0111\u1ed9c h\u1ea1i, 335 trong \u0111\u00f3 thu\u1ed9c chi\u1ebfn d\u1ecbch &#8220;ClawHavoc&#8221;: m\u1ee5c &#8220;Prerequisites&#8221; d\u1ee5 t\u1ea3i t\u1ec7p ZIP c\u00f3 m\u1eadt kh\u1ea9u ho\u1eb7c ch\u1ea1y script \u0111\u1ec3 c\u00e0i Atomic Stealer tr\u00ean macOS, keylogger tr\u00ean Windows (<a href=\"https:\/\/thehackernews.com\/2026\/02\/researchers-find-341-malicious-clawhub.html\" target=\"_blank\" rel=\"noopener nofollow\">The Hacker News<\/a>). Plugin c\u00f2n ch\u1ea1y code th\u1eadt trong Gateway n\u00ean r\u1ee7i ro cao h\u01a1n skill.<\/p>\n\n\n\n<h3 id=\"5._API_key,_token_l\u01b0u_d\u1ea1ng_th\u00f4\">5. API key, token l\u01b0u d\u1ea1ng th\u00f4<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Token bot, API key, OAuth token n\u1eb1m trong <code>~\/.openclaw<\/code> v\u00e0 t\u1ec7p <code>.env<\/code>. Theo release notes b\u1ea3n 2026.8.1, Secret Store kh\u00f4ng m\u00e3 ho\u00e1 khi l\u01b0u. Ai \u0111\u1ecdc \u0111\u01b0\u1ee3c th\u01b0 m\u1ee5c n\u00e0y, k\u1ec3 c\u1ea3 qua backup l\u1ed9 ra ngo\u00e0i hay \u1ea3nh ch\u1ee5p m\u00e0n h\u00ecnh, l\u00e0 c\u00f3 kho\u00e1 c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n<h3 id=\"6._Tool_ch\u1ea1y_th\u1eb3ng_tr\u00ean_m\u00e1y_host\">6. Tool ch\u1ea1y th\u1eb3ng tr\u00ean m\u00e1y host<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sandbox t\u1eaft m\u1eb7c \u0111\u1ecbnh (<code>sandbox.mode: \"off\"<\/code>), n\u00ean <code>exec<\/code>, tool t\u1ec7p ch\u1ea1y v\u1edbi quy\u1ec1n c\u1ee7a user ch\u1ea1y Gateway (<a href=\"https:\/\/docs.openclaw.ai\/gateway\/sandboxing\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw: Sandboxing<\/a>). Ch\u1ea1y Gateway b\u1eb1ng root ngh\u0129a l\u00e0 m\u1ed9t l\u1ec7nh sai c\u00f3 quy\u1ec1n tr\u00ean c\u1ea3 m\u00e1y.<\/p>\n\n\n\n<h3 id=\"7._Kh\u00f4ng_theo_d\u00f5i_agent_\u0111\u00e3_l\u00e0m_g\u00ec\">7. Kh\u00f4ng theo d\u00f5i agent \u0111\u00e3 l\u00e0m g\u00ec<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng \u0111\u1ecdc log, kh\u00f4ng xem tool \u0111\u00e3 g\u1ecdi th\u00ec kh\u00f4ng ph\u00e1t hi\u1ec7n \u0111\u01b0\u1ee3c agent b\u1ecb l\u1ee3i d\u1ee5ng hay automation ch\u1ea1y sai. Chi ph\u00ed token t\u0103ng b\u1ea5t th\u01b0\u1eddng c\u0169ng l\u00e0 d\u1ea5u hi\u1ec7u c\u1ea7n ki\u1ec3m.<\/p>\n\n\n\n<h2 id=\"12_c\u00e1ch_gi\u1ea3m_r\u1ee7i_ro_khi_tri\u1ec3n_khai_OpenClaw\">12 c\u00e1ch gi\u1ea3m r\u1ee7i ro khi tri\u1ec3n khai OpenClaw<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">M\u01b0\u1eddi hai b\u01b0\u1edbc d\u01b0\u1edbi \u0111\u00e2y \u0111i t\u1eeb ngo\u00e0i v\u00e0o trong: kho\u00e1 \u0111\u01b0\u1eddng m\u1ea1ng, kho\u00e1 m\u00e1y ch\u1ee7, kho\u00e1 ai \u0111\u01b0\u1ee3c nh\u1eafn, kho\u00e1 agent \u0111\u01b0\u1ee3c l\u00e0m g\u00ec, r\u1ed3i theo d\u00f5i v\u00e0 c\u1eadp nh\u1eadt.<\/p>\n\n\n\n<h3 id=\"1._Gi\u1eef_Gateway_\u1edf_loopback,_truy_c\u1eadp_t\u1eeb_xa_qua_SSH_tunnel_ho\u1eb7c_Tailscale\">1. Gi\u1eef Gateway \u1edf loopback, truy c\u1eadp t\u1eeb xa qua SSH tunnel ho\u1eb7c Tailscale<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 <code>gateway.bind: \"loopback\"<\/code> (m\u1eb7c \u0111\u1ecbnh tr\u00ean m\u00e1y th\u01b0\u1eddng). T\u1eeb m\u00e1y t\u00ednh, m\u1edf \u0111\u01b0\u1eddng h\u1ea7m SSH r\u1ed3i v\u00e0o <code>http:\/\/127.0.0.1:18789\/<\/code> (<a href=\"https:\/\/docs.openclaw.ai\/help\/faq\/gateway-ports-and-remote-mode\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw docs<\/a>):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh -N -L 18789:127.0.0.1:18789 user@IP-VPS<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">V\u1edbi Docker, s\u1eeda c\u1ed5ng publish v\u1ec1 <code>127.0.0.1<\/code> nh\u01b0 h\u01b0\u1edbng d\u1eabn trong <a href=\"https:\/\/tino.vn\/blog\/cai-dat-openclaw-tren-vps\/\">b\u00e0i c\u00e0i OpenClaw tr\u00ean VPS b\u1eb1ng Docker<\/a>. Kh\u00f4ng \u0111\u1eb7t <code>allowedOrigins: [\"*\"]<\/code>; n\u1ebfu c\u1ea7n t\u00ean mi\u1ec1n ri\u00eang, d\u00f9ng reverse proxy HTTPS v\u00e0 khai b\u00e1o \u0111\u00fang origin. C\u00e1c c\u00e1ch kh\u00e1c: <a href=\"https:\/\/tino.vn\/blog\/bao-mat-vps-chay-ai-agent-bang-tailscale\/\">Tailscale<\/a>, <a href=\"https:\/\/tino.vn\/blog\/dung-cloudflare-tunnel-bao-mat-openclaw\/\">Cloudflare Tunnel<\/a>.<\/p>\n\n\n\n<h3 id=\"2._Ki\u1ec3m_tra_c\u1ed5ng_\u0111ang_m\u1edf_v\u00e0_\u0111\u00f3ng_nh\u1eefng_g\u00ec_kh\u00f4ng_d\u00f9ng\">2. Ki\u1ec3m tra c\u1ed5ng \u0111ang m\u1edf v\u00e0 \u0111\u00f3ng nh\u1eefng g\u00ec kh\u00f4ng d\u00f9ng<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ss -tlnp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ecdi c\u1ed5ng kh\u00f4ng c\u1ea7n ra ngo\u00e0i ph\u1ea3i nghe tr\u00ean 127.0.0.1. V\u1edbi c\u1ed5ng do Docker publish, UFW kh\u00f4ng ch\u1eb7n \u0111\u01b0\u1ee3c n\u1ebfu thi\u1ebfu lu\u1eadt chu\u1ed7i <code>DOCKER-USER<\/code> (<a href=\"https:\/\/docs.openclaw.ai\/gateway\/security\/network-exposure\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw: Network exposure<\/a>). T\u1eeb m\u1ed9t m\u00e1y kh\u00e1c, th\u1eed <code>curl http:\/\/IP-VPS:18789\/healthz<\/code>: k\u1ebft qu\u1ea3 ph\u1ea3i l\u00e0 kh\u00f4ng k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c.<\/p>\n\n\n\n<h3 id=\"3._Kho\u00e1_SSH_tr\u01b0\u1edbc_khi_c\u00e0i_OpenClaw\">3. Kho\u00e1 SSH tr\u01b0\u1edbc khi c\u00e0i OpenClaw<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u0103ng nh\u1eadp b\u1eb1ng SSH key ed25519, t\u1eaft \u0111\u0103ng nh\u1eadp m\u1eadt kh\u1ea9u, b\u1eadt t\u01b0\u1eddng l\u1eeda (m\u1edf c\u1ed5ng SSH tr\u01b0\u1edbc r\u1ed3i m\u1edbi <code>ufw enable<\/code>). Chi ti\u1ebft \u1edf <a href=\"https:\/\/tino.vn\/blog\/bao-mat-vps-ubuntu\/\">b\u1ea3o m\u1eadt VPS Ubuntu<\/a>.<\/p>\n\n\n\n<h3 id=\"4._Kh\u00f4ng_ch\u1ea1y_OpenClaw_b\u1eb1ng_root\">4. Kh\u00f4ng ch\u1ea1y OpenClaw b\u1eb1ng root<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">T\u1ea1o m\u1ed9t user Linux ri\u00eang cho OpenClaw, \u0111\u1ec3 c\u1ea5u h\u00ecnh v\u00e0 workspace trong th\u01b0 m\u1ee5c c\u1ee7a user \u0111\u00f3. N\u1ebfu agent b\u1ecb l\u1ee3i d\u1ee5ng, thi\u1ec7t h\u1ea1i d\u1eebng trong quy\u1ec1n c\u1ee7a user n\u00e0y.<\/p>\n\n\n\n<h3 id=\"5._Kho\u00e1_ai_\u0111\u01b0\u1ee3c_nh\u1eafn_bot\">5. Kho\u00e1 ai \u0111\u01b0\u1ee3c nh\u1eafn bot<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Gi\u1eef DM policy <code>pairing<\/code> ho\u1eb7c chuy\u1ec3n sang <code>allowlist<\/code> v\u1edbi ID s\u1ed1; nh\u00f3m chat b\u1eadt y\u00eau c\u1ea7u mention; kh\u00f4ng th\u00eam bot v\u00e0o nh\u00f3m hay server c\u00f4ng khai.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw pairing list telegram\nopenclaw pairing approve telegram &lt;CODE&gt;<\/code><\/pre>\n\n\n\n<h3 id=\"6._Gi\u1edbi_h\u1ea1n_tool_theo_agent\">6. Gi\u1edbi h\u1ea1n tool theo agent<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Docs c\u00f3 c\u1ea5u h\u00ecnh n\u1ec1n &#8220;hardened baseline&#8221; ch\u1ec9 gi\u1eef Gateway \u1edf local, t\u00e1ch session theo ng\u01b0\u1eddi g\u1eedi, ch\u1eb7n nh\u00f3m tool runtime, t\u1ec7p, automation v\u00e0 b\u1eaft h\u1ecfi tr\u01b0\u1edbc m\u1ecdi l\u1ec7nh exec (<a href=\"https:\/\/docs.openclaw.ai\/gateway\/security\/hardened-baseline\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw: Hardened baselines<\/a>). B\u1eaft \u0111\u1ea7u t\u1eeb \u0111\u00f3 r\u1ed3i b\u1eadt l\u1ea1i t\u1eebng tool cho agent c\u1ea7n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  gateway: { mode: \"local\", bind: \"loopback\", auth: { mode: \"token\", token: \"&lt;chu\u1ed7i ng\u1eabu nhi\u00ean d\u00e0i&gt;\" } },\n  session: { dmScope: \"per-channel-peer\" },\n  tools: {\n    profile: \"messaging\",\n    deny: [\"group:automation\", \"group:runtime\", \"group:fs\", \"sessions_spawn\", \"sessions_send\"],\n    fs: { workspaceOnly: true },\n    exec: { security: \"deny\", ask: \"always\" },\n    elevated: { enabled: false },\n  },\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sinh token b\u1eb1ng <code>openssl rand -hex 32<\/code>; docs c\u1ea3nh b\u00e1o token d\u01b0\u1edbi 24 k\u00fd t\u1ef1.<\/p>\n\n\n\n<h3 id=\"7._B\u1eaft_duy\u1ec7t_c\u00e1c_h\u00e0nh_\u0111\u1ed9ng_r\u1ee7i_ro_cao\">7. B\u1eaft duy\u1ec7t c\u00e1c h\u00e0nh \u0111\u1ed9ng r\u1ee7i ro cao<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>G\u1eedi email, tin nh\u1eafn ra ngo\u00e0i.<\/li>\n\n\n<li>Xo\u00e1 ho\u1eb7c s\u1eeda t\u1ec7p quan tr\u1ecdng.<\/li>\n\n\n<li>Mua h\u00e0ng, thao t\u00e1c t\u00e0i ch\u00ednh.<\/li>\n\n\n<li>Tri\u1ec3n khai code, s\u1eeda h\u1ec7 th\u1ed1ng \u0111ang ch\u1ea1y th\u1eadt.<\/li>\n\n\n<li>Ch\u1ea1y l\u1ec7nh shell c\u00f3 quy\u1ec1n ghi.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">B\u01b0\u1edbc duy\u1ec7t ch\u1ec9 c\u00f3 t\u00e1c d\u1ee5ng khi Gateway v\u00e0 k\u00eanh duy\u1ec7t \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7; ai chi\u1ebfm \u0111\u01b0\u1ee3c Gateway th\u00ec c\u0169ng t\u1ef1 duy\u1ec7t \u0111\u01b0\u1ee3c.<\/p>\n\n\n\n<h3 id=\"8._L\u01b0u_API_key_v\u00e0_token_\u0111\u00fang_c\u00e1ch\">8. L\u01b0u API key v\u00e0 token \u0111\u00fang c\u00e1ch<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0110\u1eb7t key qua bi\u1ebfn m\u00f4i tr\u01b0\u1eddng ho\u1eb7c SecretRef thay v\u00ec ghi th\u1eb3ng v\u00e0o <code>openclaw.json<\/code>.<\/li>\n\n\n<li>Gi\u1eef quy\u1ec1n t\u1ec7p 600, th\u01b0 m\u1ee5c 700; <code>openclaw security audit --fix<\/code> t\u1ef1 si\u1ebft quy\u1ec1n n\u00e0y.<\/li>\n\n\n<li>Kh\u00f4ng \u0111\u01b0a <code>~\/.openclaw<\/code>, <code>.env<\/code> l\u00ean GitHub; backup th\u00ec m\u00e3 ho\u00e1.<\/li>\n\n\n<li>Che key, token, IP trong m\u1ecdi \u1ea3nh ch\u1ee5p m\u00e0n h\u00ecnh; l\u1ed9 r\u1ed3i th\u00ec thu h\u1ed3i v\u00e0 t\u1ea1o key m\u1edbi.<\/li>\n<\/ul>\n\n\n\n<h3 id=\"9._B\u1eadt_sandbox_cho_agent_ch\u1ea1y_l\u1ec7nh\">9. B\u1eadt sandbox cho agent ch\u1ea1y l\u1ec7nh<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1eb7t <code>agents.defaults.sandbox.mode<\/code> th\u00e0nh <code>\"non-main\"<\/code> ho\u1eb7c <code>\"all\"<\/code> \u0111\u1ec3 tool ch\u1ea1y trong container Docker; container sandbox m\u1eb7c \u0111\u1ecbnh kh\u00f4ng c\u00f3 m\u1ea1ng, workspace m\u1eb7c \u0111\u1ecbnh kh\u00f4ng \u0111\u01b0\u1ee3c g\u1eafn v\u00e0o. H\u01b0\u1edbng d\u1eabn chi ti\u1ebft tr\u00ean VPS: <a href=\"https:\/\/tino.vn\/blog\/cach-ly-sandbox-cho-ai-agent-tren-vps\/\">c\u00e1ch ly sandbox cho AI Agent<\/a>. Ch\u1ea1y ch\u00ednh Gateway trong Docker kh\u00f4ng thay \u0111\u01b0\u1ee3c sandbox: Docker c\u00e1ch ly Gateway v\u1edbi host, nh\u01b0ng agent v\u1eabn c\u00f3 to\u00e0n quy\u1ec1n b\u00ean trong container \u0111\u00f3.<\/p>\n\n\n\n<h3 id=\"10._C\u1ea9n_tr\u1ecdng_v\u1edbi_tr\u00ecnh_duy\u1ec7t_t\u1ef1_\u0111\u1ed9ng_v\u00e0_n\u1ed9i_dung_l\u1ea1\">10. C\u1ea9n tr\u1ecdng v\u1edbi tr\u00ecnh duy\u1ec7t t\u1ef1 \u0111\u1ed9ng v\u00e0 n\u1ed9i dung l\u1ea1<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cho agent d\u00f9ng tr\u00ecnh duy\u1ec7t ch\u01b0a \u0111\u0103ng nh\u1eadp t\u00e0i kho\u1ea3n quan tr\u1ecdng, gi\u1edbi h\u1ea1n t\u00ean mi\u1ec1n \u0111\u01b0\u1ee3c m\u1edf, coi email v\u00e0 trang web l\u1ea1 l\u00e0 d\u1eef li\u1ec7u kh\u00f4ng tin c\u1eady. T\u00e1ch tr\u00ecnh duy\u1ec7t ra container ri\u00eang nh\u01b0 <a href=\"https:\/\/tino.vn\/blog\/trien-khai-browserless-sandbox-tren-vps\/\">Browserless tr\u00ean VPS<\/a> gi\u00fap gi\u1edbi h\u1ea1n ph\u1ea1m vi.<\/p>\n\n\n\n<h3 id=\"11._Ki\u1ec3m_skill_tr\u01b0\u1edbc_khi_c\u00e0i\">11. Ki\u1ec3m skill tr\u01b0\u1edbc khi c\u00e0i<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ecdc <code>SKILL.md<\/code> v\u00e0 t\u1ec7p \u0111i k\u00e8m, xem k\u1ebft qu\u1ea3 qu\u00e9t tr\u00ean trang ClawHub, c\u1ea3nh gi\u00e1c v\u1edbi m\u1ee5c y\u00eau c\u1ea7u t\u1ea3i ZIP, d\u00e1n l\u1ec7nh v\u00e0o terminal. \u0110\u1eb7t <code>security.installPolicy<\/code> \u0111\u1ec3 c\u1ea3nh b\u00e1o ho\u1eb7c ch\u1eb7n skill b\u1ecb g\u1eafn c\u1edd (<a href=\"https:\/\/docs.openclaw.ai\/cli\/skills\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw CLI: skills<\/a>).<\/p>\n\n\n\n<h3 id=\"12._Ch\u1ea1y_security_audit,_\u0111\u1ecdc_log,_c\u1eadp_nh\u1eadt_c\u00f3_ki\u1ec3m_so\u00e1t\">12. Ch\u1ea1y security audit, \u0111\u1ecdc log, c\u1eadp nh\u1eadt c\u00f3 ki\u1ec3m so\u00e1t<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw security audit\nopenclaw security audit --deep\nopenclaw update status<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Audit b\u00e1o c\u00e1c c\u1ea5u h\u00ecnh nguy hi\u1ec3m: Gateway m\u1edf ra ngo\u00e0i, token y\u1ebfu, c\u1edd debug c\u00f2n b\u1eadt (<a href=\"https:\/\/docs.openclaw.ai\/gateway\/security\/running-the-audit\" target=\"_blank\" rel=\"noopener nofollow\">OpenClaw: Running the audit<\/a>). Tr\u01b0\u1edbc khi c\u1eadp nh\u1eadt, sao l\u01b0u <code>~\/.openclaw<\/code> ho\u1eb7c snapshot VPS; c\u00e1ch l\u00e0m an to\u00e0n \u1edf <a href=\"https:\/\/tino.vn\/blog\/nang-cap-openclaw\/\">h\u01b0\u1edbng d\u1eabn n\u00e2ng c\u1ea5p OpenClaw<\/a> v\u00e0 <a href=\"https:\/\/tino.vn\/blog\/tu-dong-backup-n8n-va-openclaw-len-google-drive\/\">t\u1ef1 \u0111\u1ed9ng backup OpenClaw l\u00ean Google Drive<\/a>.<\/p>\n\n\n\n<h2 id=\"M\u1edbi_d\u00f9ng_OpenClaw_th\u00ec_n\u00ean_t\u1ef1_\u0111\u1ed9ng_ho\u00e1_nh\u1eefng_g\u00ec_tr\u01b0\u1edbc?\">M\u1edbi d\u00f9ng OpenClaw th\u00ec n\u00ean t\u1ef1 \u0111\u1ed9ng ho\u00e1 nh\u1eefng g\u00ec tr\u01b0\u1edbc?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">N\u00ean b\u1eaft \u0111\u1ea7u b\u1eb1ng vi\u1ec7c ch\u1ec9 \u0111\u1ecdc, c\u00f3 th\u1ec3 ho\u00e0n t\u00e1c v\u00e0 d\u1ec5 ki\u1ec3m: b\u1ea3n tin t\u00f3m t\u1eaft, t\u00f3m t\u1eaft h\u1ed9p th\u01b0 (kh\u00f4ng t\u1ef1 tr\u1ea3 l\u1eddi), b\u00e1o c\u00e1o theo l\u1ecbch t\u1eeb log ho\u1eb7c dashboard, nh\u1eafc vi\u1ec7c t\u1eeb ghi ch\u00fa. Ch\u1ea1y v\u00e0i tu\u1ea7n, \u0111\u1ecdc log, r\u1ed3i m\u1edbi th\u00eam vi\u1ec7c ghi r\u1ee7i ro th\u1ea5p nh\u01b0 l\u01b0u b\u00e1o c\u00e1o, t\u1ea1o nh\u00e1p l\u1ecbch.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Giai \u0111o\u1ea1n<\/th><th>Vi\u1ec7c n\u00ean giao<\/th><th>Quy\u1ec1n c\u1ea7n m\u1edf<\/th><\/tr><\/thead><tbody><tr><td>1. Ch\u1ec9 \u0111\u1ecdc<\/td><td>B\u1ea3n tin, t\u00f3m t\u1eaft email, b\u00e1o c\u00e1o log<\/td><td>web_search, \u0111\u1ecdc t\u1ec7p trong 1 th\u01b0 m\u1ee5c<\/td><\/tr><tr><td>2. Ghi r\u1ee7i ro th\u1ea5p<\/td><td>L\u01b0u b\u00e1o c\u00e1o, t\u1ea1o nh\u00e1p email, s\u1ef1 ki\u1ec7n l\u1ecbch<\/td><td>Ghi trong workspace, c\u00f3 backup, sandbox<\/td><\/tr><tr><td>3. H\u00e0nh \u0111\u1ed9ng c\u00f3 duy\u1ec7t<\/td><td>G\u1eedi email, ch\u1ea1y l\u1ec7nh tr\u00ean server th\u1eadt<\/td><td>Ng\u01b0\u1eddi duy\u1ec7t t\u1eebng l\u1ea7n, allowlist ng\u01b0\u1eddi g\u1eedi<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5 vi\u1ec7c c\u1ee5 th\u1ec3 cho t\u1eebng giai \u0111o\u1ea1n c\u00f3 \u1edf <a href=\"https:\/\/tino.vn\/blog\/openclaw-lam-duoc-nhung-gi\/\">OpenClaw l\u00e0m \u0111\u01b0\u1ee3c nh\u1eefng g\u00ec<\/a>.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Mu\u1ed1n ch\u1ea1y OpenClaw 24\/7 m\u00e0 kh\u00f4ng t\u1ef1 c\u00e0i? <a href=\"https:\/\/tino.vn\/vps-openclaw\">VPS OpenClaw c\u1ee7a Tino<\/a> c\u00e0i s\u1eb5n OpenClaw tr\u00ean VPS NVMe \u0111\u1eb7t t\u1ea1i Vi\u1ec7t Nam; b\u1ea1n v\u1eabn c\u00f3 quy\u1ec1n root \u0111\u1ec3 c\u1ea5u h\u00ecnh. Xem c\u1ea5u h\u00ecnh v\u00e0 gi\u00e1 tr\u00ean trang s\u1ea3n ph\u1ea9m.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">VPS c\u00e0i s\u1eb5n gi\u00fap b\u1ecf qua ph\u1ea7n d\u1ef1ng m\u00f4i tr\u01b0\u1eddng; c\u00e1c b\u01b0\u1edbc kho\u00e1 ai \u0111\u01b0\u1ee3c nh\u1eafn, quy\u1ec1n tool, skill v\u00e0 key v\u1eabn do b\u1ea1n c\u1ea5u h\u00ecnh.<\/p>\n\n\n\n<h2 id=\"Nh\u1eefng_c\u00e2u_h\u1ecfi_th\u01b0\u1eddng_g\u1eb7p\">Nh\u1eefng c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p<\/h2>\n\n\n\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"OpenClaw_c\u00f3_an_to\u00e0n_\u0111\u1ec3_s\u1eed_d\u1ee5ng_kh\u00f4ng?\">OpenClaw c\u00f3 an to\u00e0n \u0111\u1ec3 s\u1eed d\u1ee5ng kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">An to\u00e0n khi c\u1ea5u h\u00ecnh \u0111\u00fang: Gateway \u1edf loopback, truy c\u1eadp t\u1eeb xa qua SSH tunnel ho\u1eb7c Tailscale, ng\u01b0\u1eddi l\u1ea1 ph\u1ea3i qua pairing, b\u1eadt sandbox cho tool ch\u1ea1y l\u1ec7nh v\u00e0 ch\u1ec9 c\u00e0i skill \u0111\u00e3 \u0111\u1ecdc. Ch\u1ea1y b\u1eb1ng root, m\u1edf c\u1ed5ng 18789 ra Internet ho\u1eb7c c\u00e0i skill l\u1ea1 l\u00e0 c\u00e1c c\u1ea5u h\u00ecnh r\u1ee7i ro cao.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"V\u00ec_sao_kh\u00f4ng_n\u00ean_ch\u1ea1y_OpenClaw_b\u1eb1ng_quy\u1ec1n_root?\">V\u00ec sao kh\u00f4ng n\u00ean ch\u1ea1y OpenClaw b\u1eb1ng quy\u1ec1n root?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">V\u00ec sandbox t\u1eaft m\u1eb7c \u0111\u1ecbnh, tool c\u1ee7a agent ch\u1ea1y v\u1edbi quy\u1ec1n c\u1ee7a user ch\u1ea1y Gateway. N\u1ebfu \u0111\u00f3 l\u00e0 root, m\u1ed9t l\u1ec7nh b\u1ecb thao t\u00fang c\u00f3 to\u00e0n quy\u1ec1n tr\u00ean m\u00e1y. User ri\u00eang gi\u1edbi h\u1ea1n thi\u1ec7t h\u1ea1i trong th\u01b0 m\u1ee5c c\u1ee7a user \u0111\u00f3.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u00f3_n\u00ean_m\u1edf_Gateway_\u1edf_0.0.0.0_\u0111\u1ec3_truy_c\u1eadp_cho_ti\u1ec7n?\">C\u00f3 n\u00ean m\u1edf Gateway \u1edf 0.0.0.0 \u0111\u1ec3 truy c\u1eadp cho ti\u1ec7n?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. Bind ra m\u1ecdi \u0111\u1ecba ch\u1ec9 l\u00e0 \u0111\u01b0a Gateway ra Internet, bot qu\u00e9t c\u1ed5ng s\u1ebd t\u00ecm th\u1ea5y v\u00e0 th\u1eed token. Gi\u1eef loopback, m\u1edf Control UI qua SSH tunnel; n\u1ebfu bu\u1ed9c ph\u1ea3i m\u1edf, \u0111\u1eb7t sau reverse proxy HTTPS c\u00f3 x\u00e1c th\u1ef1c v\u00e0 t\u01b0\u1eddng l\u1eeda gi\u1edbi h\u1ea1n IP.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Ch\u1ea1y_OpenClaw_trong_Docker_\u0111\u00e3_\u0111\u1ee7_an_to\u00e0n_ch\u01b0a?\">Ch\u1ea1y OpenClaw trong Docker \u0111\u00e3 \u0111\u1ee7 an to\u00e0n ch\u01b0a?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Ch\u01b0a \u0111\u1ee7. Docker t\u00e1ch Gateway kh\u1ecfi h\u1ec7 \u0111i\u1ec1u h\u00e0nh host, nh\u01b0ng agent v\u1eabn c\u00f3 quy\u1ec1n trong container, \u0111\u1ecdc \u0111\u01b0\u1ee3c credential trong \u0111\u00f3 v\u00e0 d\u00f9ng \u0111\u01b0\u1ee3c m\u1ea1ng. C\u1ea7n th\u00eam sandbox cho tool, gi\u1edbi h\u1ea1n tool v\u00e0 kh\u00f4ng publish c\u1ed5ng ra ngo\u00e0i.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"L\u1ee1_\u0111\u1ec3_l\u1ed9_API_key_ho\u1eb7c_token_bot_th\u00ec_l\u00e0m_g\u00ec?\">L\u1ee1 \u0111\u1ec3 l\u1ed9 API key ho\u1eb7c token bot th\u00ec l\u00e0m g\u00ec?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Thu h\u1ed3i ngay \u1edf trang c\u1ee7a nh\u00e0 cung c\u1ea5p (ho\u1eb7c @BotFather v\u1edbi Telegram), t\u1ea1o key m\u1edbi, c\u1eadp nh\u1eadt c\u1ea5u h\u00ecnh OpenClaw r\u1ed3i kh\u1edfi \u0111\u1ed9ng l\u1ea1i Gateway. Ki\u1ec3m tra m\u1ee5c Usage v\u00e0 log \u0111\u1ec3 xem key \u0111\u00e3 b\u1ecb d\u00f9ng ch\u01b0a.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\n<script type=\"application\/ld+json\">\n\t{\n\t\t\"@context\": \"https:\/\/schema.org\",\n\t\t\"@type\": \"FAQPage\",\n\t\t\"mainEntity\": [\n\t\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"OpenClaw c\u00f3 an to\u00e0n \u0111\u1ec3 s\u1eed d\u1ee5ng kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>An to\u00e0n khi c\u1ea5u h\u00ecnh \u0111\u00fang: Gateway \u1edf loopback, truy c\u1eadp t\u1eeb xa qua SSH tunnel ho\u1eb7c Tailscale, ng\u01b0\u1eddi l\u1ea1 ph\u1ea3i qua pairing, b\u1eadt sandbox cho tool ch\u1ea1y l\u1ec7nh v\u00e0 ch\u1ec9 c\u00e0i skill \u0111\u00e3 \u0111\u1ecdc. Ch\u1ea1y b\u1eb1ng root, m\u1edf c\u1ed5ng 18789 ra Internet ho\u1eb7c c\u00e0i skill l\u1ea1 l\u00e0 c\u00e1c c\u1ea5u h\u00ecnh r\u1ee7i ro cao.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"V\u00ec sao kh\u00f4ng n\u00ean ch\u1ea1y OpenClaw b\u1eb1ng quy\u1ec1n root?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>V\u00ec sandbox t\u1eaft m\u1eb7c \u0111\u1ecbnh, tool c\u1ee7a agent ch\u1ea1y v\u1edbi quy\u1ec1n c\u1ee7a user ch\u1ea1y Gateway. N\u1ebfu \u0111\u00f3 l\u00e0 root, m\u1ed9t l\u1ec7nh b\u1ecb thao t\u00fang c\u00f3 to\u00e0n quy\u1ec1n tr\u00ean m\u00e1y. User ri\u00eang gi\u1edbi h\u1ea1n thi\u1ec7t h\u1ea1i trong th\u01b0 m\u1ee5c c\u1ee7a user \u0111\u00f3.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u00f3 n\u00ean m\u1edf Gateway \u1edf 0.0.0.0 \u0111\u1ec3 truy c\u1eadp cho ti\u1ec7n?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Kh\u00f4ng. Bind ra m\u1ecdi \u0111\u1ecba ch\u1ec9 l\u00e0 \u0111\u01b0a Gateway ra Internet, bot qu\u00e9t c\u1ed5ng s\u1ebd t\u00ecm th\u1ea5y v\u00e0 th\u1eed token. Gi\u1eef loopback, m\u1edf Control UI qua SSH tunnel; n\u1ebfu bu\u1ed9c ph\u1ea3i m\u1edf, \u0111\u1eb7t sau reverse proxy HTTPS c\u00f3 x\u00e1c th\u1ef1c v\u00e0 t\u01b0\u1eddng l\u1eeda gi\u1edbi h\u1ea1n IP.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Ch\u1ea1y OpenClaw trong Docker \u0111\u00e3 \u0111\u1ee7 an to\u00e0n ch\u01b0a?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Ch\u01b0a \u0111\u1ee7. Docker t\u00e1ch Gateway kh\u1ecfi h\u1ec7 \u0111i\u1ec1u h\u00e0nh host, nh\u01b0ng agent v\u1eabn c\u00f3 quy\u1ec1n trong container, \u0111\u1ecdc \u0111\u01b0\u1ee3c credential trong \u0111\u00f3 v\u00e0 d\u00f9ng \u0111\u01b0\u1ee3c m\u1ea1ng. C\u1ea7n th\u00eam sandbox cho tool, gi\u1edbi h\u1ea1n tool v\u00e0 kh\u00f4ng publish c\u1ed5ng ra ngo\u00e0i.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"L\u1ee1 \u0111\u1ec3 l\u1ed9 API key ho\u1eb7c token bot th\u00ec l\u00e0m g\u00ec?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Thu h\u1ed3i ngay \u1edf trang c\u1ee7a nh\u00e0 cung c\u1ea5p (ho\u1eb7c @BotFather v\u1edbi Telegram), t\u1ea1o key m\u1edbi, c\u1eadp nh\u1eadt c\u1ea5u h\u00ecnh OpenClaw r\u1ed3i kh\u1edfi \u0111\u1ed9ng l\u1ea1i Gateway. Ki\u1ec3m tra m\u1ee5c Usage v\u00e0 log \u0111\u1ec3 xem key \u0111\u00e3 b\u1ecb d\u00f9ng ch\u01b0a.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t\t\t\t]\n\t}\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>OpenClaw an to\u00e0n \u0111\u1ebfn \u0111\u00e2u l\u00e0 do c\u00e1ch b\u1ea1n c\u1ea5u h\u00ecnh. Gateway m\u1eb7c \u0111\u1ecbnh ch\u1ec9 nghe tr\u00ean 127.0.0.1, b\u1eaft bu\u1ed9c token v\u00e0 b\u1eaft ng\u01b0\u1eddi l\u1ea1 qua b\u01b0\u1edbc pairing; nh\u01b0ng sandbox t\u1eaft m\u1eb7c \u0111\u1ecbnh, n\u00ean tool agent \u0111\u01b0\u1ee3c ph\u00e9p d\u00f9ng s\u1ebd ch\u1ea1y th\u1eb3ng tr\u00ean m\u00e1y v\u1edbi quy\u1ec1n c\u1ee7a t\u00e0i kho\u1ea3n ch\u1ea1y Gateway. R\u1ee7i ro l\u1edbn nh\u1ea5t [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":124249,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7552],"tags":[7580],"class_list":["post-124241","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-openclaw","tag-bao-mat-openclaw"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/124241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=124241"}],"version-history":[{"count":4,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/124241\/revisions"}],"predecessor-version":[{"id":132093,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/124241\/revisions\/132093"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/124249"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=124241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=124241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=124241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}