From c579b07843b558aad91713b21773a4de329ef0fe Mon Sep 17 00:00:00 2001
From: Robert <robert@lazyworkhorse.net>
Date: Sat, 4 Apr 2026 17:49:39 -0400
Subject: [PATCH] fix: read gateway token from secret file via bash

---
 modules/nixos/services/openclaw_node.nix | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/modules/nixos/services/openclaw_node.nix b/modules/nixos/services/openclaw_node.nix
index 1a3e40a..f90589c 100644
--- a/modules/nixos/services/openclaw_node.nix
+++ b/modules/nixos/services/openclaw_node.nix
@@ -50,18 +50,13 @@ in {
         Group = cfg.user;
         WorkingDirectory = "/home/${cfg.user}";
         ExecStart = ''
-          ${openclawPkg}/bin/openclaw \
-            node run \
-            --host ${cfg.gatewayHost} \
-            --port ${toString cfg.gatewayPort} \
-            --display-name "${cfg.displayName}"
+          ${pkgs.bash}/bin/bash -c 'export OPENCLAW_GATEWAY_TOKEN=$(cat ${cfg.gatewayTokenFile}) && exec ${openclawPkg}/bin/openclaw node run --host ${cfg.gatewayHost} --port ${toString cfg.gatewayPort} --display-name "${cfg.displayName}"'
         '';
         Restart = "always";
         RestartSec = 5;
       };
 
       environment = {
-        OPENCLAW_GATEWAY_TOKEN_FILE = cfg.gatewayTokenFile;
         NODE_ENV = "production";
       };
     };