diff --git a/apps/base/customer1/openclaw/deployment.yaml b/apps/base/customer1/openclaw/deployment.yaml
index f17d06f..da579f6 100644
--- a/apps/base/customer1/openclaw/deployment.yaml
+++ b/apps/base/customer1/openclaw/deployment.yaml
@@ -64,11 +64,16 @@ spec:
         - name: gateway
           image: ghcr.io/openclaw/openclaw:slim
           imagePullPolicy: IfNotPresent
+          
           command:
             - node
             - /app/dist/index.js
             - gateway
             - run
+          ports:
+            - name: gateway
+              containerPort: 18789
+              protocol: TCP 
           env:
             - name: HOME
               value: /home/node
@@ -76,7 +81,43 @@ spec:
               value: /home/node/.openclaw
             - name: NODE_ENV
               value: production
-            # your secrets ...
+            - name: NPM_CONFIG_CACHE
+              value: /tmp/.npm
+            - name: OPENCLAW_GATEWAY_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: openclaw-secrets
+                  key: OPENCLAW_GATEWAY_TOKEN
+            - name: ANTHROPIC_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: openclaw-secrets
+                  key: ANTHROPIC_API_KEY
+                  optional: true
+            - name: TELEGRAM_BOT_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: openclaw-secrets
+                  key: TELEGRAM_BOT_TOKEN
+                  optional: true
+            - name: GEMINI_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: openclaw-secrets
+                  key: GEMINI_API_KEY
+                  optional: true
+            - name: OPENROUTER_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: openclaw-secrets
+                  key: OPENROUTER_API_KEY
+                  optional: true
+            - name: XAI_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: xai-apikey
+                  key: XAI_API_KEY
+                  optional: true
 
             # Force npm cache to a writable location
             - name: NPM_CONFIG_CACHE