Update entrypoint.sh

entrypoint.sh

@@ -2,6 +2,17 @@
 # OpenClaw HF Spaces - Production Entrypoint
 # Storage: HF Storage Bucket at /data (100 GB persistent)
 
+# ── Fix: Force IPv4 for Telegram (IPv6 route broken on HF nodes) ──
+sysctl -w net.ipv6.conf.all.disable_ipv6=1 2>/dev/null || true
+sysctl -w net.ipv6.conf.default.disable_ipv6=1 2>/dev/null || true
+export NODE_OPTIONS="--dns-result-order=ipv4first ${NODE_OPTIONS:-}"
+{
+  echo "149.154.167.51  api.telegram.org"
+  echo "149.154.167.220 api.telegram.org"
+  echo "91.108.56.130   api.telegram.org"
+} >> /etc/hosts 2>/dev/null || true
+echo "[entrypoint] IPv6 disabled, IPv4 forced for Telegram"
+
 # ----------------------------------------------------------------
 # Logging
 # ----------------------------------------------------------------
@@ -11,8 +22,6 @@ warn() { echo "[$(ts)] [entrypoint] WARN: $*"; }
 
 # ----------------------------------------------------------------
 # Storage: resolve OPENCLAW_HOME
-# Prefer /data (HF Storage Bucket). Fall back to /home/user.
-# Retry up to 5s in case the bucket mount is slightly delayed.
 # ----------------------------------------------------------------
 OPENCLAW_HOME=/home/user
 mkdir -p /home/user/.openclaw
@@ -62,15 +71,12 @@ done
 export HF_TOKEN="${HF_TOKEN:-}"
 
 # ----------------------------------------------------------------
-# One-time setup (config write, webhook registration, seed files)
+# One-time setup
 # ----------------------------------------------------------------
 log "Running setup..."
 node /app/spaces/huggingface/setup-hf-config.mjs || true
 log "Setup done."
 
-# ----------------------------------------------------------------
-# Security audit (non-fatal)
-# ----------------------------------------------------------------
 if [ -f /app/security-check.sh ]; then
   sh /app/security-check.sh || true
 fi
@@ -152,4 +158,4 @@ while true; do
 
   sleep 1
   log "Restarting gateway..."
-done
+done