Connection Priority
- Use Headscale or Tailscale private addresses first.
- Use the server OpenClaw mesh gateway as the primary gateway for agents and VoiceLink automation.
- Use the local Mac gateway only as a fallback when the server mesh is unavailable.
- Use public Clawdia domains only after authentication and never as a direct Ollama proxy.
Private Services
| Service | Private URL | Use |
|---|---|---|
| OpenClaw mesh UI | http://100.64.0.2:18790 |
Primary control surface for mesh agents. |
| Token broker | http://100.64.0.2:18788 |
Issues authenticated mesh tokens for approved devices. |
| Server Ollama | http://100.64.0.2:11434 |
Private model runtime. Do not expose publicly. |
iOS and Desktop Client Notes
Install and sign in to Tailscale or the approved Headscale profile before using private VoiceLink or OpenClaw mesh addresses. If the private address does not load, confirm the device is connected to the Tailnet, then retry the same private URL before using any public fallback.
Desktop clients should keep the server gateway as primary and the local gateway as fallback. iOS clients should use the Tailnet path when available and should not be configured to reach Ollama directly.
Public Fallback Rules
Public clawdia.* domains must require authentication before proxying gateway actions. They may expose landing, status, login, and documentation pages, but they must not expose Ollama directly or print raw tokens in page content, logs, or room messages.