Update stack.yml for new volume mounts; add README

stack.yml

@@ -8,9 +8,18 @@ services:
       TERM: xterm-256color
       OPENCLAW_GATEWAY_TOKEN: ${OPENCLAW_GATEWAY_TOKEN}
       MOONSHOT_API_KEY: ${MOONSHOT_API_KEY}
+      OPENCLAW_CONFIG_DIR: /data/config
+      GOG_CONFIG_DIR: /data/gog
+      GOOGLE_APPLICATION_CREDENTIALS: /data/secrets/google-credentials.json
+      GOG_ACCOUNT: ${GOG_ACCOUNT:-}
     volumes:
       - openclaw-config:/home/node/.openclaw
       - openclaw-workspace:/home/node/.openclaw/workspace
+      # Mount configs and secrets from host (not baked into image)
+      - ./config:/data/config:ro
+      - ./secrets:/data/secrets:ro
+      # gog OAuth tokens persist here
+      - gog-data:/data/gog
     ports:
       - target: 18789
         published: ${OPENCLAW_GATEWAY_PORT:-18789}
@@ -28,6 +37,9 @@ services:
           - node.hostname == tpi-n1
     networks:
       - dokploy-network
+    # Add Gitea SSH access (if needed for git operations)
+    extra_hosts:
+      - "gitea.bendtstudio.com:192.168.2.130"
     command:
       [
         "node",
@@ -39,36 +51,10 @@ services:
         "18789",
       ]
 
-  # Note: CLI service is interactive and best run locally or via docker run
-  # Uncomment if you need it for specific use cases
-  # openclaw-cli:
-  #   image: ${OPENCLAW_IMAGE:-openclaw:local}
-  #   environment:
-  #     HOME: /home/node
-  #     TERM: xterm-256color
-  #     OPENCLAW_GATEWAY_TOKEN: ${OPENCLAW_GATEWAY_TOKEN}
-  #     BROWSER: echo
-  #     MOONSHOT_API_KEY: ${MOONSHOT_API_KEY}
-  #   volumes:
-  #     - openclaw-config:/home/node/.openclaw
-  #     - openclaw-workspace:/home/node/.openclaw/workspace
-  #   stdin_open: true
-  #   tty: true
-  #   init: true
-  #   deploy:
-  #     replicas: 1
-  #     placement:
-  #       constraints:
-  #         - node.hostname == tpi-n1
-  #     restart_policy:
-  #       condition: unless-stopped
-  #   networks:
-  #     - dokploy-network
-  #   entrypoint: ["node", "dist/index.js"]
-
 volumes:
   openclaw-config:
   openclaw-workspace:
+  gog-data:
 
 networks:
   dokploy-network: