THE OFF-GRID OS: Hosting a 24/7 OpenClaw Gateway on Local Silicon via Cloudflare
THE OFF-GRID OSHost a 24/7 OpenClaw Gateway on Local Silicon via Cloudflare TunnelYour context and skills belong on your own hardware, not in a corporate walled garden.Stop paying $20/month to let someone else index your private repos, notes, and shell history. This is the field guide for developers who want a real AI assistant that lives on a Mac Mini or Raspberry Pi, runs while you sleep, remembers everything locally, and answers you on Telegram and WhatsApp.No port forwarding. No exposed IP. No vector DB subscription. Just persistent, local-first intelligence.The problem with cloud agentsHosted AI workspaces are convenient until they are not. They rate limit you. They reset your memory when models change. They train on your data. When their API goes down at 2am, your automations die with it.Local silicon is now better. An M2 Mac Mini idles at 7 watts. A Pi 5 with NVMe costs less than two months of ChatGPT Team. Both can run a full OpenClaw gateway 24/7 with instant access to your ~/Developer folder.What you will build in one afternoonA self-hosted agent OS that: Boots on power and never dies (systemd user service on Linux, launchd on macOS) Exposes a secure HTTPS endpoint with Cloudflare Tunnel, zero open ports Remembers projects, decisions, and code patterns in local markdown files, not a cloud database Answers from your phone via Telegram and WhatsApp with pairing-code security Runs custom daemons: hourly git summaries, cron jobs, file watchers, shell tools Costs $0 per month to operate Inside the 2,500+ word guideThis is not a beginner npm install tutorial. We skip the basics and go straight to production.PART 1: IMMORTAL DAEMONComplete copy-paste systemd unit and launchd plist. Enable linger, auto-restart, and proper logging. Your gateway survives reboots and crashes.PART 2: THE AGENT OSProduction SOUL.md, TOOLS.md, and AGENTS.md templates. Define personality, memory policy, filesystem allowlists, and shell denylists. Make your agent refuse dangerous commands and remember what matters.PART 3: CLOUDFLARE TUNNEL (THE RIGHT WAY)Step by step cloudflared install, tunnel create, config.yml, ingress rules, and running as a service. Add Zero Trust Access so only your email can reach the gateway.PART 4: MOBILE BRIDGEExact commands for Telegram and WhatsApp pairing. Set dmPolicy=pairing, approve contacts, and query your local dev directory from your phone: "list projects in ~/Developer", "summarize today's commits", "find TODOs in this repo".PART 5: PERSISTENT MEMORY & AUTOMATIONWire up the cron skill, heartbeat loops, and git-tracked memory. No Pinecone, no subscriptions.PART 6: HARDENING PLAYBOOKUFW firewall rules, sandbox mode for non-main sessions, allowFrom lists, secrets handling, and the five commands to debug any failure.You get The full HTML guide, beautifully formatted like Claude's docs Copy-paste systemd service for Raspberry Pi / Ubuntu Copy-paste launchd plist for Mac Mini cloudflared config.yml template with security headers 3 ready-to-use SOUL.md personalities (Engineer, Researcher, Operator) TOOLS.md with safe defaults for local filesystem access Telegram/WhatsApp pairing checklist Perfect for Senior devs, homelabbers, and indie hackers running a Mac Mini, NUC, or Pi cluster Anyone using OpenClaw, Claude Code, or local LLMs who wants 24/7 uptime People who want mobile access to their local machine without Tailscale or VPNs Builders who are done paying rent for their own context Not for Beginners looking for "how to install Node" People who want a fully managed cloud solution Anyone uncomfortable editing a config file Stack usedOpenClaw Gateway • Node 24 • Cloudflare Tunnel • systemd / launchd • Telegram Bot API • WhatsApp Cloud API • Local Markdown MemoryOwn your agent. Own your memory. Own your uptime.Your second brain should live in your house, not in someone else's data center.
Get it → numbpilled.gumroad.com