Set up persistent remote access to a Mac Mini for Telnyx CS team. Use when onboarding a new team member who needs WireGuard VPN, SSH access from phone, and OpenClaw running as a background service. Covers installation, LaunchDaemon auto-start, Termius setup, and troubleshooting.
Full onboarding for Telnyx CS team Mac Minis — WireGuard + LaunchDaemon + SSH + OpenClaw.
assets/wg-start.sh — wrapper script (update CONF_PATH to user's .conf file)assets/com.telnyx.wireguard.plist — LaunchDaemon plist (update script path)/opt/homebrew/bin/bash explicitly — macOS ships bash 3; wg-quick requires bash 4+sleep infinitywhile true; do sleep 3600; done/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
brew install wireguard-tools
sudo systemsetup -setremotelogin on
Contact Telnyx network admin for a peer config. Save to:
~/clawd/skills/telnyx-network/wg-yourname-mac.conf
Test manually:
sudo /opt/homebrew/bin/wg-quick up ~/clawd/skills/telnyx-network/wg-yourname-mac.conf
ifconfig | grep 172.27 # verify IP shows
sudo /opt/homebrew/bin/wg-quick down ~/clawd/skills/telnyx-network/wg-yourname-mac.conf
Copy assets, update paths, install:
# Copy and edit wg-start.sh — update CONF_PATH
cp assets/wg-start.sh ~/clawd/skills/telnyx-network/wg-start.sh
chmod +x ~/clawd/skills/telnyx-network/wg-start.sh
# Copy plist to /tmp, update script path inside it
cp assets/com.telnyx.wireguard.plist /tmp/com.telnyx.wireguard.plist
# Install
sudo cp /tmp/com.telnyx.wireguard.plist /Library/LaunchDaemons/
sudo launchctl load /Library/LaunchDaemons/com.telnyx.wireguard.plist
# Verify
ifconfig | grep 172.27
Install Termius on iPhone/Android. Add host:
whoami)Test from cellular to confirm remote access works.
npm install -g openclaw
mkdir -p ~/clawd && openclaw init
openclaw gateway start
WireGuard not up after reboot:
cat /var/log/wireguard.log
sudo launchctl unload /Library/LaunchDaemons/com.telnyx.wireguard.plist
sudo launchctl load /Library/LaunchDaemons/com.telnyx.wireguard.plist
FileVault note: Full power cycle requires keyboard entry of FileVault password. Regular OS update reboots resume the logged-in session automatically — no action needed.