(TWCC) Founder of TW The Sandbox Creators Association.
Committed to promoting The Sandbox and culti
(TWCC) TW The Sandbox Creator Club Twitter: @TWCCTheSandbox
@windscribecom
Just signed up for @windscribe and got 10GB free data/month! Tweeted from https://t.co/hng3Y3nNWr to unlock extra 5GB. Great #VPN! @seccpixie
How to @openclaw on VPS safely: from fresh Ubuntu VPS → hardened private AI server in 30 min
1) Lock down SSH
→ Keys only, no passwords, no root login.
sudo nano /etc/ssh/sshd_config
# Set explicitly:
PasswordAuthentication no
PermitRootLogin no
sudo sshd -t && sudo systemctl reload ssh
2) Default-deny firewall
→ Block everything incoming by default.
sudo apt install ufw -y
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw enable
3) Brute-force protection
→ Auto-ban IPs after failed login attempts.
sudo apt install fail2ban -y
sudo systemctl enable --now fail2ban
4) Install Tailscale
→ Your private VPN mesh network.
curl -fsSL https://t.co/MynNrCBRlo | sh
sudo tailscale up
5) SSH only via Tailscale
→ No more public SSH exposure.
# Verify Tailscale is working first!
tailscale status
sudo ufw allow from 100.64.0.0/10 to any port 22 proto tcp
sudo ufw delete allow OpenSSH
6) Web ports private too
→ App only accessible from your devices.
sudo ufw allow from 100.64.0.0/10 to any port 443 proto tcp
sudo ufw allow from 100.64.0.0/10 to any port 80 proto tcp
7) Disable IPv6 (optional)
→ Reduces attack surface if unused.
sudo sed -i 's/IPV6=yes/IPV6=no/' /etc/default/ufw
echo "net.ipv6.conf.all.disable_ipv6 = 1" | sudo tee -a /etc/sysctl.conf
sudo sysctl -p && sudo ufw reload
8) Clawdbot install
→ AI assistant on your private server.
npm install -g clawdbot && clawdbot doctor
9) Lock Clawdbot to owner only
→ Only you can message the bot.
{ "dmPolicy": "allowlist", "allowFrom": ["YOUR_TELEGRAM_ID"], "groupPolicy": "allowlist" }
10) Fix credential permissions
→ Don't leave secrets world-readable.
chmod 700 ~/.clawdbot/credentials
chmod 600 .env
11) Run security audit
→ Catches issues you missed - don't skip!
clawdbot security audit --deep
Verify everything:
sudo ufw status
ss -tulnp
tailscale status
clawdbot doctor
Result:
✅ No public SSH
✅ No public web ports
✅ Server only reachable via Tailscale
✅ Bot responds only to you
✅ Private AI server in 30 min
NOW you can start playing, not before.
You buckle your seatbelts before you step on the gas, hmkay?
I'm eligible for a FCFS WL for the LootGO Compass from @lootgo_official to amplify my rewards on mainnet! 🧭
Mint opens soon, check your eligibility 👇
https://t.co/clXXhoLd44
Solana Seekers deserve some love too. Claim your Seeker X Moonbirds SBT on @solana now!
Open for all owners of a @solanamobile Seeker with a Seeker Genesis Token as well as all holders of Moonbirds, Mythics & Oddities. Holders can mint 1 SBT per NFT held.
https://t.co/WuEbSgP7at
It’s your season to stack $SAND 🤑
Finish your Premium Pass in Alpha Season 6 to unlock the 250K $SAND Pool where your EP turns into $SAND.
Get your Premium Pass now 👉 https://t.co/MrvW1uJKi6