1
authentication:
2
  enabled: true
3
  method: "multi"  # basic, token, oauth, multi
4

5
  # Basic 认证
6
  basic:
7
    enabled: true
8
    users:
9
      - username: "admin"
10
        passwordHash: "$2b$10$..."  # bcrypt 哈希
11
        role: "administrator"
12

13
  # Token 认证
14
  token:
15
    enabled: true
16
    algorithm: "HS256"
17
    secret: "${JWT_SECRET}"
18
    expiresIn: "24h"
19
    refreshExpiry: "7d"
20

21
  # OAuth 2.0
22
  oauth:
23
    enabled: false
24
    providers:
25
      - name: "github"
26
        clientId: "${GITHUB_CLIENT_ID}"
27
        clientSecret: "${GITHUB_CLIENT_SECRET}"
28
        callbackUrl: "https://your-domain.com/auth/github/callback"
29
      - name: "google"
30
        clientId: "${GOOGLE_CLIENT_ID}"
31
        clientSecret: "${GOOGLE_CLIENT_SECRET}"
32
        callbackUrl: "https://your-domain.com/auth/google/callback"

1
authorization:
2
  enabled: true
3
  strategy: "rbac"
4

5
  roles:
6
    admin:
7
      permissions:
8
        - "agent:*"
9
        - "workflow:*"
10
        - "channel:*"
11
        - "config:*"
12
        - "user:*"
13

14
    operator:
15
      permissions:
16
        - "agent:execute"
17
        - "workflow:execute"
18
        - "channel:read"
19
        - "config:read"
20

21
    user:
22
      permissions:
23
        - "agent:execute:basic-assistant"
24
        - "workflow:execute:basic-workflow"
25
        - "channel:send"
26

27
    guest:
28
      permissions:
29
        - "agent:execute:basic-assistant"
30
        - "channel:send:public"
31

32
  # 用户角色分配
33
  users:
34
    - username: "admin"
35
      roles: ["admin"]
36
    - username: "operator1"
37
      roles: ["operator"]
38
    - username: "user1"
39
      roles: ["user"]

1
tokens:
2
  # API 令牌
3
  apiTokens:
4
    - name: "service-account"
5
      token: "${SERVICE_API_TOKEN}"
6
      permissions: ["agent:*", "workflow:*"]
7
      expiresAt: "2026-12-31"
8
      rateLimit: 1000
9

10
    - name: "integration-token"
11
      token: "${INTEGRATION_API_TOKEN}"
12
      permissions: ["channel:send", "agent:execute"]
13
      expiresAt: "2026-06-30"
14
      rateLimit: 100
15

16
  # 令牌轮换策略
17
  rotation:
18
    enabled: true
19
    interval: "90d"
20
    notification: true
21
    gracePeriod: "7d"

1
pii:
2
  enabled: true
3
  action: "redact"  # redact, encrypt, block
4

5
  # 识别规则
6
  rules:
7
    - type: "email"
8
      pattern: "\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Z|a-z]{2,}\\b"
9
      replacement: "[EMAIL]"
10

11
    - type: "phone"
12
      pattern: "\\b\\d{3}[-.]?\\d{3}[-.]?\\d{4}\\b"
13
      replacement: "[PHONE]"
14

15
    - type: "ssn"
16
      pattern: "\\b\\d{3}-\\d{2}-\\d{4}\\b"
17
      replacement: "[SSN]"
18

19
    - type: "credit_card"
20
      pattern: "\\b\\d{4}[- ]?\\d{4}[- ]?\\d{4}[- ]?\\d{4}\\b"
21
      replacement: "[CREDIT_CARD]"
22

23
    - type: "api_key"
24
      pattern: "\\b[A-Za-z0-9]{32,}\\b"
25
      replacement: "[API_KEY]"
26

27
  # 上下文感知
28
  contextAware:
29
    enabled: true
30
    rules:
31
      - context: "medical"
32
        additionalRules: ["patient_id", "medical_record"]
33
      - context: "financial"
34
        additionalRules: ["account_number", "transaction_id"]

1
encryption:
2
  # 静态数据加密
3
  atRest:
4
    enabled: true
5
    algorithm: "AES-256-GCM"
6
    keySource: "vault"
7
    keyRotation: "90d"
8

9
    # 加密范围
10
    scope:
11
      - "database"
12
      - "filesystem"
13
      - "logs"
14

15
  # 传输中加密
16
  inTransit:
17
    enabled: true
18
    tls:
19
      version: "1.3"
20
      ciphers:
21
        - "TLS_AES_256_GCM_SHA384"
22
        - "TLS_CHACHA20_POLY1305_SHA256"
23
      minVersion: "1.2"
24
      verify: true
25

26
  # 密钥管理
27
  keyManagement:
28
    provider: "vault"
29
    vault:
30
      address: "https://vault.your-domain.com"
31
      authMethod: "token"
32
      token: "${VAULT_TOKEN}"
33
      engine: "transit"
34
      keyName: "openclaw"

1
backup:
2
  enabled: true
3
  schedule: "0 2 * * *"  # 每天凌晨 2 点
4

5
  # 备份内容
6
  includes:
7
    - "workspace"
8
    - "data"
9
    - "config"
10

11
  # 排除内容
12
  excludes:
13
    - "*.log"
14
    - "*.tmp"
15
    - "node_modules"
16

17
  # 加密备份
18
  encryption:
19
    enabled: true
20
    algorithm: "AES-256"
21
    password: "${BACKUP_ENCRYPTION_PASSWORD}"
22

23
  # 存储位置
24
  storage:
25
    type: "s3"
26
    s3:
27
      bucket: "openclaw-backups"
28
      region: "us-east-1"
29
      accessKey: "${AWS_ACCESS_KEY}"
30
      secretKey: "${AWS_SECRET_KEY}"
31

32
  # 保留策略
33
  retention:
34
    daily: 7
35
    weekly: 4
36
    monthly: 12
37
    yearly: 3

1
validation:
2
  enabled: true
3

4
  # 消息长度限制
5
  messageLength:
6
    max: 10000
7
    min: 1
8

9
  # 内容类型验证
10
  contentType:
11
    allowed:
12
      - "text/plain"
13
      - "text/markdown"
14
      - "application/json"
15

16
  # 格式验证
17
  format:
18
    strict: true
19
    sanitize: true
20
    stripTags: true
21

22
  # 恶意输入检测
23
  maliciousInput:
24
    enabled: true
25
    patterns:
26
      - type: "sql_injection"
27
        pattern: "(?i)(union|select|insert|delete|drop|alter|create)\\s+"
28
        action: "block"
29
      - type: "xss"
30
        pattern: "<script|javascript:|on\\w+\\s*="
31
        action: "sanitize"
32
      - type: "path_traversal"
33
        pattern: "\\.{2}/|\\\\.{2}\\\\"
34
        action: "block"
35
      - type: "command_injection"
36
        pattern: ";|&&|\\||`|\\$\\(|\\$\\{"
37
        action: "block"

1
promptInjection:
2
  enabled: true
3

4
  # 检测策略
5
  detection:
6
    strategies:
7
      - type: "keyword"
8
        keywords:
9
          - "ignore previous instructions"
10
          - "disregard all above"
11
          - "forget everything"
12
          - "new instructions"
13
          - "override"
14
          - "bypass"
15
          - "admin mode"
16
          - "system prompt"
17
          - "developer mode"
18
        threshold: 3  # 匹配 3 个以上关键词
19

20
      - type: "pattern"
21
        patterns:
22
          - "(?i)you are now"
23
          - "(?i)act as"
24
          - "(?i)pretend to be"
25
          - "(?i)simulated mode"
26
          - "(?i)jailbreak"
27

28
      - type: "semantic"
29
        model: "gpt-4o-mini"
30
        threshold: 0.8
31

32
  # 防护措施
33
  protection:
34
    enabled: true
35
    actions:
36
      - type: "block"
37
        severity: "high"
38
      - type: "flag"
39
        severity: "medium"
40
        notify: true
41
      - type: "sanitize"
42
        severity: "low"
43

44
  # 上下文隔离
45
  contextIsolation:
46
    enabled: true
47
    method: "sandbox"
48
    maxContextLength: 4000

1
outputFilter:
2
  enabled: true
3

4
  # 内容过滤
5
  content:
6
    removePII: true
7
    removeSecrets: true
8
    sanitizeHTML: true
9

10
  # 敏感信息检测
11
  sensitiveInfo:
12
    enabled: true
13
    rules:
14
      - type: "api_key"
15
        pattern: "\\b[A-Za-z0-9]{32,}\\b"
16
        replacement: "[REDACTED]"
17
      - type: "password"
18
        pattern: "(?i)password\\s*[:=]\\s*\\S+"
19
        replacement: "password: [REDACTED]"
20
      - type: "token"
21
        pattern: "(?i)token\\s*[:=]\\s*\\S+"
22
        replacement: "token: [REDACTED]"
23

24
  # 长度限制
25
  length:
26
    max: 5000
27
    truncate: true
28
    ellipsis: "..."
29

30
  # 格式化
31
  formatting:
32
    escapeMarkdown: false
33
    sanitizeHTML: true
34
    removeScripts: true

1
network:
2
  # 防火墙配置
3
  firewall:
4
    enabled: true
5
    defaultPolicy: "deny"
6

7
    rules:
8
      - name: "allow-web-ui"
9
        direction: "inbound"
10
        port: 3000
11
        protocol: "tcp"
12
        source: "0.0.0.0/0"
13
        action: "allow"
14

15
      - name: "allow-webhook"
16
        direction: "inbound"
17
        port: 3001
18
        protocol: "tcp"
19
        source: "trusted-ips"
20
        action: "allow"
21

22
      - name: "deny-all"
23
        direction: "inbound"
24
        action: "deny"
25

26
  # 受信任的 IP
27
  trustedIPs:
28
    - "192.168.1.0/24"
29
    - "10.0.0.0/8"
30

31
  # 网络分段
32
  segmentation:
33
    enabled: true
34
    zones:
35
      - name: "public"
36
        interfaces: ["eth0"]
37
        access: "web-ui"
38
      - name: "private"
39
        interfaces: ["eth1"]
40
        access: "internal-api"
41
      - name: "isolated"
42
        interfaces: ["eth2"]
43
        access: "database"

1
tls:
2
  enabled: true
3

4
  # 证书配置
5
  certificate:
6
    type: "auto"  # auto, manual, letsencrypt
7

8
    auto:
9
      provider: "letsencrypt"
10
      email: "admin@your-domain.com"
11
      domains:
12
        - "your-domain.com"
13
        - "*.your-domain.com"
14

15
    manual:
16
      certPath: "/etc/ssl/certs/openclaw.crt"
17
      keyPath: "/etc/ssl/private/openclaw.key"
18
      chainPath: "/etc/ssl/certs/chain.crt"
19

20
  # TLS 版本
21
  minVersion: "1.2"
22
  maxVersion: "1.3"
23

24
  # 密码套件
25
  ciphers:
26
    - "TLS_AES_256_GCM_SHA384"
27
    - "TLS_CHACHA20_POLY1305_SHA256"
28
    - "TLS_AES_128_GCM_SHA256"
29

30
  # HSTS
31
  hsts:
32
    enabled: true
33
    maxAge: 31536000  # 1 年
34
    includeSubDomains: true
35
    preload: true

1
api:
2
  # 速率限制
3
  rateLimit:
4
    enabled: true
5
    window: "1m"
6
    maxRequests: 100
7
    burst: 20
8

9
    # 基于用户的限制
10
    perUser:
11
      admin: 1000
12
      operator: 500
13
      user: 100
14
      guest: 10
15

16
  # CORS 配置
17
  cors:
18
    enabled: true
19
    origin:
20
      - "https://your-domain.com"
21
      - "https://app.your-domain.com"
22
    methods:
23
      - "GET"
24
      - "POST"
25
      - "PUT"
26
      - "DELETE"
27
    allowedHeaders:
28
      - "Authorization"
29
      - "Content-Type"
30
    credentials: true
31
    maxAge: 86400
32

33
  # API 密钥
34
  apiKeys:
35
    enabled: true
36
    header: "X-API-Key"
37
    validation:
38
      minLength: 32
39
      pattern: "^[A-Za-z0-9_-]+$"

1
filesystem:
2
  # 访问控制
3
  accessControl:
4
    enabled: true
5

6
    # 允许的路径
7
    allowedPaths:
8
      - "/home/openclaw/workspace"
9
      - "/home/openclaw/data"
10
      - "/tmp/openclaw"
11

12
    # 禁止的路径
13
    forbiddenPaths:
14
      - "/etc"
15
      - "/root"
16
      - "/var/log"
17
      - "/sys"
18
      - "/proc"
19

20
    # 文件权限
21
    permissions:
22
      default: "640"
23
      directories: "750"
24
      sensitive: "600"
25

26
  # 文件类型限制
27
  fileTypeRestrictions:
28
    enabled: true
29
    allowed:
30
      - ".txt"
31
      - ".md"
32
      - ".json"
33
      - ".yaml"
34
      - ".yml"
35
      - ".csv"
36
    blocked:
37
      - ".exe"
38
      - ".sh"
39
      - ".bat"
40
      - ".cmd"
41
      - ".ps1"
42
      - ".vbs"
43

44
  # 文件大小限制
45
  fileSize:
46
    max: 10485760  # 10MB
47
    total: 104857600  # 100MB

1
upload:
2
  enabled: true
3

4
  # 验证
5
  validation:
6
    checkMimeType: true
7
    checkExtension: true
8
    scanForMalware: true
9

10
    allowedMimeTypes:
11
      - "text/plain"
12
      - "text/markdown"
13
      - "application/json"
14
      - "text/csv"
15

16
    maxFiles: 10
17
    maxFileSize: 5242880  # 5MB
18

19
  # 存储配置
20
  storage:
21
    path: "/home/openclaw/uploads"
22
    quarantine: "/home/openclaw/quarantine"
23
    generateRandomName: true
24
    overwrite: false
25

26
  # 病毒扫描
27
  virusScan:
28
    enabled: true
29
    scanner: "clamav"
30
    socket: "/var/run/clamav/clamd.ctl"
31
    action: "quarantine"

1
logging:
2
  # 安全事件日志
3
  security:
4
    enabled: true
5
    level: "info"
6
    format: "json"
7

8
    events:
9
      - "authentication"
10
      - "authorization"
11
      - "permission_denied"
12
      - "malicious_input"
13
      - "prompt_injection"
14
      - "rate_limit_exceeded"
15
      - "api_error"
16
      - "system_error"
17

18
    # 输出
19
    outputs:
20
      - type: "file"
21
        path: "/var/log/openclaw/security.log"
22
        maxSize: "100M"
23
        maxFiles: 10
24
      - type: "syslog"
25
        facility: "local0"
26
      - type: "elasticsearch"
27
        url: "http://localhost:9200"
28
        index: "openclaw-security"
29

30
  # 审计日志
31
  audit:
32
    enabled: true
33
    events:
34
      - "user_login"
35
      - "user_logout"
36
      - "agent_created"
37
      - "agent_modified"
38
      - "agent_deleted"
39
      - "workflow_executed"
40
      - "config_changed"
41
      - "permission_changed"
42

43
    retention:
44
      days: 365
45
      compress: true
46

47
    # 签名
48
    signing:
49
      enabled: true
50
      algorithm: "SHA256"
51
      key: "${AUDIT_SIGNING_KEY}"

1
monitoring:
2
  # 安全指标
3
  metrics:
4
    enabled: true
5
    collectionInterval: 60
6

7
    indicators:
8
      - name: "failed_login_attempts"
9
        threshold: 10
10
        window: "5m"
11
        severity: "high"
12
      - name: "malicious_input_count"
13
        threshold: 5
14
        window: "1m"
15
        severity: "high"
16
      - name: "prompt_injection_attempts"
17
        threshold: 3
18
        window: "1m"
19
        severity: "high"
20
      - name: "rate_limit_violations"
21
        threshold: 20
22
        window: "1m"
23
        severity: "medium"
24
      - name: "api_errors"
25
        threshold: 50
26
        window: "1m"
27
        severity: "medium"
28

29
  # 告警配置
30
  alerts:
31
    enabled: true
32
    channels:
33
      - type: "email"
34
        recipients:
35
          - "security@your-domain.com"
36
      - type: "slack"
37
        webhook: "${SLACK_WEBHOOK_URL}"
38
      - type: "telegram"
39
        botToken: "${TELEGRAM_BOT_TOKEN}"
40
        chatId: "${TELEGRAM_CHAT_ID}"
41

42
    # 告警规则
43
    rules:
44
      - name: "critical_security_event"
45
        conditions:
46
          - metric: "failed_login_attempts"
47
            operator: ">"
48
            value: 10
49
        actions:
50
          - type: "block_ip"
51
            duration: "1h"
52
          - type: "notify"
53
            severity: "critical"

1
gdpr:
2
  enabled: true
3

4
  # 数据主体权利
5
  rights:
6
    rightToAccess: true
7
    rightToRectification: true
8
    rightToErasure: true
9
    rightToPortability: true
10
    rightToObject: true
11

12
  # 数据处理记录
13
  processingRecords:
14
    enabled: true
15
    purposes:
16
      - "AI 助手服务"
17
      - "数据分析"
18
      - "系统改进"
19
    legalBasis: "consent"
20
    retentionPeriod: "P2Y"  # 2 年
21

22
  # 数据导出
23
  dataExport:
24
    enabled: true
25
    formats:
26
      - "json"
27
      - "csv"
28
    compression: true
29
    encryption: true
30

31
  # 数据删除
32
  dataDeletion:
33
    enabled: true
34
    retentionPeriod: "P2Y"
35
    anonymization: true
36
    verification: true

1
soc2:
2
  enabled: true
3

4
  # 安全控制
5
  security:
6
    accessControl: true
7
    encryption: true
8
    incidentResponse: true
9
    vulnerabilityManagement: true
10

11
  # 可用性控制
12
  availability:
13
    redundancy: true
14
    disasterRecovery: true
15
    monitoring: true
16

17
  # 处理完整性控制
18
  processingIntegrity:
19
    dataValidation: true
20
    auditLogging: true
21
    changeManagement: true
22

23
  # 机密性控制
24
  confidentiality:
25
    dataClassification: true
26
    accessLogging: true
27
    encryptionInTransit: true

1
incidentResponse:
2
  # 响应团队
3
  team:
4
    - role: "incident_commander"
5
      contact: "incident-commander@your-domain.com"
6
    - role: "security_analyst"
7
      contact: "security@your-domain.com"
8
    - role: "system_admin"
9
      contact: "admin@your-domain.com"
10

11
  # 响应流程
12
  procedure:
13
    - step: "detection"
14
      actions:
15
        - "监控告警"
16
        - "日志分析"
17
    - step: "containment"
18
      actions:
19
        - "隔离受影响系统"
20
        - "阻止恶意 IP"
21
    - step: "eradication"
22
      actions:
23
        - "清除恶意代码"
24
        - "修补漏洞"
25
    - step: "recovery"
26
      actions:
27
        - "恢复系统"
28
        - "验证完整性"
29
    - step: "post-incident"
30
      actions:
31
        - "事后分析"
32
        - "改进措施"