Optimizacija serverja za OpenClaw

cat > /root/openclaw_optimize_hetzner.sh <<'EOF'
#!/usr/bin/env bash
set -euo pipefail

TS="$(date +%F_%H-%M-%S)"
BACKUP_DIR="/root/openclaw-backup-$TS"
OC_DIR="/opt/openclaw"
OC_HOME="/root/.openclaw"

echo "=== OpenClaw Hetzner optimizer ==="
echo "Backup dir: $BACKUP_DIR"
mkdir -p "$BACKUP_DIR"

echo
echo "### 1) Backup"
cp -a "$OC_DIR/docker-compose.yml" "$BACKUP_DIR/docker-compose.yml.bak" 2>/dev/null || true
cp -a "$OC_DIR/.env" "$BACKUP_DIR/env.bak" 2>/dev/null || true
cp -a "$OC_HOME/openclaw.json" "$BACKUP_DIR/openclaw.json.bak" 2>/dev/null || true
cp -a /etc/docker/daemon.json "$BACKUP_DIR/daemon.json.bak" 2>/dev/null || true
cp -a /etc/fstab "$BACKUP_DIR/fstab.bak" 2>/dev/null || true
cp -a /etc/sysctl.d/99-openclaw-stability.conf "$BACKUP_DIR/99-openclaw-stability.conf.bak" 2>/dev/null || true

echo "Backup completed."

echo
echo "### 2) Ensure 4 GB swap"
if ! swapon --show | grep -q "/swapfile"; then
 if [ ! -f /swapfile ]; then
   fallocate -l 4G /swapfile
   chmod 600 /swapfile
   mkswap /swapfile
 fi
 swapon /swapfile || true
fi

if ! grep -q '^/swapfile ' /etc/fstab; then
 echo '/swapfile none swap sw 0 0' >> /etc/fstab
fi

cat > /etc/sysctl.d/99-openclaw-stability.conf <<'SYSCTL'
vm.swappiness=20
vm.vfs_cache_pressure=50
SYSCTL

sysctl --system >/dev/null || true

echo
echo "### 3) Docker log rotation"
mkdir -p /etc/docker
cat > /etc/docker/daemon.json <<'DOCKERJSON'
{
 "log-driver": "json-file",
 "log-opts": {
   "max-size": "20m",
   "max-file": "5"
 }
}
DOCKERJSON

echo
echo "### 4) Optimize docker-compose.yml"
cd "$OC_DIR"

# localhost-only ports
sed -i 's#- "${OPENCLAW_GATEWAY_PORT:-18789}:18789"#- "127.0.0.1:${OPENCLAW_GATEWAY_PORT:-18789}:18789"#g' docker-compose.yml
sed -i 's#- "${OPENCLAW_BRIDGE_PORT:-18790}:18790"#- "127.0.0.1:${OPENCLAW_BRIDGE_PORT:-18790}:18790"#g' docker-compose.yml
sed -i 's#- "18789:18789"#- "127.0.0.1:18789:18789"#g' docker-compose.yml
sed -i 's#- "18790:18790"#- "127.0.0.1:18790:18790"#g' docker-compose.yml

# Node memory limit
if ! grep -q 'NODE_OPTIONS=--max-old-space-size=' docker-compose.yml; then
 sed -i '/NODE_ENV=production/a\      - NODE_OPTIONS=--max-old-space-size=1536'  docker-compose.yml || true
fi

# Ensure restart policy exists for gateway if missing near service may already exist
if ! grep -q 'restart: unless-stopped' docker-compose.yml; then
 echo "WARNING: restart: unless-stopped not found. Please verify compose manually."
fi

echo
echo "### 5) Ensure OpenClaw ownership"
mkdir -p "$OC_HOME/workspace"
chown -R 1000:1000 "$OC_HOME"

echo
echo "### 6) Create quick status script"
cat > /root/oc-status.sh <<'STATUS'
#!/usr/bin/env bash
echo "=== Docker containers ==="
docker ps --format "table Predloga:.Names\tPredloga:.Status\tPredloga:.Ports"

echo
echo "=== OpenClaw health ==="
curl -fsS http://127.0.0.1:18789/healthz || true
echo
curl -fsS http://127.0.0.1:18789/readyz || true
echo

echo
echo "=== RAM / Swap ==="
free -h
swapon --show

echo
echo "=== Ports ==="
ss -ltnp | grep -E '18789|18790' || true

echo
echo "=== Recent gateway warnings ==="
docker logs openclaw-openclaw-gateway-1 --tail 120 2>&1 | grep -Ei  'warning|error|oom|failed|fatal|event_loop|security' || true
STATUS

chmod +x /root/oc-status.sh

echo
echo "### 7) Restart Docker + OpenClaw"
systemctl restart docker
sleep 15

cd "$OC_DIR"
docker compose up -d
sleep 45

echo
echo "### 8) Final status"
/root/oc-status.sh

echo
echo "=== DONE ==="
echo "Backup saved in: $BACKUP_DIR"
EOF

chmod +x /root/openclaw_optimize_hetzner.sh
/root/openclaw_optimize_hetzner.sh