Run Clawco in Docker

Requirements

Docker with the Compose plugin, and a copy of the Clawco source folder.

Get Docker

Start

In the source folder, run:

docker compose up -d --build

Then open http://127.0.0.1:8750. Start greets a new user.

What holds

• Reachable from this machine only: the port is published on 127.0.0.1.
• Your data lives outside the image, in the volume clawco-data at /data. A new image never carries data.
• The root filesystem is read-only, and the app runs as an ordinary user, not as root.
• Keys you paste in Start are saved in /data/.env, next to the credentials for each source.

Backup

A backup is a copy of the data volume:

docker run --rm -v clawco_clawco-data:/data -v "$PWD":/ud busybox tar czf /ud/clawco-data.tgz -C /data .

The agent

The container starts without a model key; Start asks for one. To use your own Hermes, set its address before you start:

KC_HERMES_URL=http://host.docker.internal:8642 docker compose up -d

A notes folder (optional)

To let Clawco read and save notes in a folder, uncomment the two notes lines in compose.yaml, then start with the folder named. It must be writable by user 1000.

CLAWCO_NOTER=/path/to/notes docker compose up -d

Tailscale (optional)

An optional profile adds Tailscale, so you can reach Clawco from your phone over HTTPS. Put a Tailscale auth key in ~/.config/clawco/tailscale-authkey first, then run:

docker compose --profile tailscale up -d

Funnel stays off. This profile has been checked against Tailscale's documentation but has not yet been run against a real tailnet.

About Tailscale