OpenClaw for teams — one-command setup for a production-ready agent stack on Ubuntu.

• OpenClaw Gateway (systemd)
• OpenClaw Studio
• Optional: Hindsight PageIndex
• Optional: WatchClaw security + Telegram alert channel
• Optional: Cloudflare tunnel wiring
• Security baseline: SSH hardening, UFW, fail2ban, kernel sysctl hardening

curl -fsSL https://raw.githubusercontent.com/kashifeqbal/teamclaw/main/setup-org.sh -o setup-org.sh
bash setup-org.sh

cp team.env.example team.env
# edit values
bash setup-org.sh --config team.env

bash setup-org.sh --config team.env --dry-run

• validates env
• prints planned actions
• makes no system changes

bash scripts/rollback-teamclaw.sh
# or explicit backup
bash scripts/rollback-teamclaw.sh ~/.openclaw/openclaw.json.bak.20260318-123000

• Runs as root (no separate openclaw user)
• Gateway bind defaults to loopback
• Claude auth is still manual after install:
  • openclaw models auth add