fix(sandbox): require noVNC observer password auth

This commit is contained in:
Peter Steinberger
2026-02-21 13:44:17 +01:00
parent 6cb7e16d40
commit 621d8e1312
9 changed files with 91 additions and 10 deletions

View File

@@ -495,6 +495,7 @@ Notes:
- Headful (Xvfb) reduces bot blocking vs headless.
- Headless can still be used by setting `agents.defaults.sandbox.browser.headless=true`.
- No full desktop environment (GNOME) is needed; Xvfb provides the display.
- noVNC observer access is password-protected by default; OpenClaw provides an auto-connect URL with the password query parameter.
Use config: