[Unit]
Description=OpenClaw Gateway Service
Documentation=https://docs.openclaw.ai
After=network.target
Wants=network-online.target

[Service]
Type=simple
User=root
WorkingDirectory=/root/.openclaw
Environment=NODE_ENV=production

# Main gateway process
ExecStart=/usr/bin/node /www/server/nodejs/v24.13.1/bin/openclaw gateway start
ExecReload=/bin/kill -HUP $MAINPID

# Auto-healing configuration
Restart=always
RestartSec=10
StartLimitInterval=300
StartLimitBurst=5

# Resource limits to prevent OOM
MemoryLimit=2G
CPUQuota=80%

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=openclaw-gateway

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/root/.openclaw

# Watchdog for health monitoring
WatchdogSec=30

[Install]
WantedBy=multi-user.target