How do I run OpenClaw 24/7 on a Hetzner VPS?

# New Ubuntu 24.04 server, logged in as root
apt-get update && apt-get install -y ufw
ufw allow OpenSSH && ufw --force enable

# A normal user for OpenClaw; its service keeps running after logout
adduser --gecos "" claw
loginctl enable-linger claw
rsync --archive --chown=claw:claw ~/.ssh /home/claw

# Log in again as that user
ssh claw@YOUR_SERVER_IP

# OpenClaw's installer, without the setup wizard for now
curl -fsSL https://openclaw.ai/install.sh | bash -s -- --no-onboard

# Your key, where the gateway service reads it
mkdir -p ~/.openclaw && chmod 700 ~/.openclaw
echo 'STANDARD_COMPUTE_API_KEY=YOUR_API_KEY' >> ~/.openclaw/.env
chmod 600 ~/.openclaw/.env

[
  { "path": "models.mode", "value": "merge" },
  { "path": "models.providers.standardcompute", "value": {
      "baseUrl": "https://api.stdcmpt.com/v1",
      "apiKey": "${STANDARD_COMPUTE_API_KEY}",
      "api": "openai-responses",
      "models": [{
        "id": "standardcompute", "name": "Standard Compute",
        "reasoning": false, "input": ["text", "image"],
        "contextWindow": 1000000, "maxTokens": 8192,
        "cost": { "input": 0, "output": 0, "cacheRead": 0, "cacheWrite": 0 }
      }]
  } },
  { "path": "agents.defaults.model", "value": { "primary": "standardcompute/standardcompute" } },
  { "path": "agents.defaults.imageModel", "value": { "primary": "standardcompute/standardcompute" } },
  { "path": "agents.defaults.subagents.model", "value": "standardcompute/standardcompute" },
  { "path": "agents.defaults.heartbeat.every", "value": "1h" }
]

# Save the Provider tab as standardcompute.json, then:
openclaw config set --batch-file standardcompute.json
openclaw config validate

# Installs the always-on service. Choose "Keep existing model config"
openclaw onboard --install-daemon
openclaw models status   # Default: standardcompute/standardcompute

# On your laptop: reach the Control UI through SSH, no open port
ssh -N -L 18789:127.0.0.1:18789 claw@YOUR_SERVER_IP
# then run "openclaw dashboard --no-open" on the server for the URL