Tutorials

Hands-on deep dives into DevOps and server-side topics, with every command runnable in an attached remote playground.

Tutorial

Harden Access to OpenClaw with Pomerium

Put OpenClaw, a self-hosted AI assistant with shell and file access, behind a web route and an SSH route, both gated by the same identity and Pomerium's context-aware policy. OpenClaw runs in trusted-proxy mode, trusting signed identity headers instead of its own login, while Pomerium's native SSH proxy signs short-lived certificates for shell access.

Harden Access to OpenClaw with Pomerium (cover image)