+
Hermes Agent is Nous Research's open-source (MIT) AI agent — "the agent that grows with you." Its standout feature is persistent memory: it learns your projects and doesn't forget across restarts. This guide deploys it on the same WEC Instance you already use for OpenClaw, points it at a model, and proves the memory survives a full reboot.
+
In Article 2 we put Caddy in front of
OpenClaw for HTTPS, and in Article 3
we added a Telegram channel. The gateway works — but Caddy is still listening on
0.0.0.0, reachable by anything that can route to the box. This is the chave de
ouro for the series: we join the server and your laptop to a NetBird mesh,
repoint openclaw.local at the mesh IP, and close the public ports. The same
https://openclaw.local/chat URL keeps working — but only for your devices.
Every command and error below is from the actual run.
+You've deployed OpenClaw and secured it behind HTTPS. Now make it usable — talk to your agent from your phone via Telegram. We create a bot, connect it, clear OpenClaw's pairing gate, and get a real reply. Every command and gotcha below is from an actual run.
+In Article 1 we got OpenClaw running —
but only over plain HTTP, with an allowInsecureAuth workaround. Here we put
Caddy in front of it as a reverse proxy: real HTTPS,
device-paired auth, and the gateway's raw ports closed so the proxy is the only
way in. Every command and error below is from the actual deploy.
++Deploy a self-hosted OpenClaw AI agent on a WEC Instance with Docker Compose — from spinning up the VM to an agent that actually answers, using your own model API key. Every command, version, and error below was captured from a real deployment on a WEC Instance.