Securely expose an OpenClaw Gateway WebUI on a VPS via Cloudflare Zero Trust Access + Cloudflare Tunnel (cloudflared), including DNS cutover for custom hostnames and optional cleanup of Tailscale Serve.
Initial release: Cloudflare Tunnel + Access pattern for OpenClaw WebUI; includes bundled DNS helper for least-privilege subdomain/record management.