Update

docker/moltbot/docker-entrypoint.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+set -e
+
+# Always update config to ensure trustedProxies is set for k8s ingress
+# Using clawdbot.json (default config name) instead of moltbot.json
+# Config includes:
+# - trustedProxies: k8s pod network CIDRs for nginx ingress
+# - controlUi.allowInsecureAuth: true - allows token-only auth behind reverse proxy
+# - auth.mode: token - requires gateway token for authentication
+echo '{"gateway":{"mode":"local","bind":"lan","port":18789,"trustedProxies":["10.42.0.0/16","10.43.0.0/16"],"controlUi":{"allowInsecureAuth":true},"auth":{"mode":"token"}},"agents":{"defaults":{"workspace":"/home/node/clawd"}}}' > /home/node/.clawdbot/clawdbot.json
+
+echo "Clawdbot config written:"
+cat /home/node/.clawdbot/clawdbot.json
+
+echo "Starting clawdbot gateway..."
+exec "$@"