Hi @mescal
The r1 only supports unsecure connection when you use your local network. In order to use a vps service you must use a domain that has a valid ssl certificate in order to use wss.
This is really easy though:
Step 1: if you don’t own a domain already, you can buy one. You can get a .xyz domain for like $2 on namecheap.
Step 2: the easiest way to setup ssl is to connect your domain to cloudflare name servers for free
Step 3: in cloudflare click “zero trust" > networks > connectors and make a new tunnel.
Step 4: paste the tunnnel install and link commands into your vps terminal
Step 5: back on Cloudflare zero trust click on your tunnel then click edit > published application routes > add a published application route
Step 6: select your domain and type in anything for your sub domain. For service click http and for url put localhost:YOUR_OPENCLAW_PORT_HERE
Step 7: on R1 OpenClaw QR Gen - Boondit enter in your url you made on the zero trust panel and set the port to “443” (it must be 443 and not the openclaw port). Once you put in your token and click generate, scan the QR using your R1
Step 8: after scanning the QR code run the connection script that rabbit provides to approve your r1. After that you’re all done!
Also note that this same method works for accessing your home OpenClaw instance remotely if you wish
Thanks to Aidan from our community for this help ![]()