diff --git a/apps/base/customer1/openclaw/configmap.yaml b/apps/base/customer1/openclaw/configmap.yaml
index 9b41b74..c4cf4b0 100644
--- a/apps/base/customer1/openclaw/configmap.yaml
+++ b/apps/base/customer1/openclaw/configmap.yaml
@@ -19,6 +19,31 @@ data:
           "enabled": true
         }
       },
+      
+
+      "channels": {
+        "telegram": {
+          "enabled": true,
+          "dmPolicy": "allowlist",          # or "pairing" if you prefer
+          "groupPolicy": "allowlist",
+          "requireMention": true,           # safer in group chats
+          "allowFrom": [
+            "7528130947"
+            # Add more user IDs if needed
+          ],
+          "groups": {
+            "*": {
+              "requireMention": true
+            }
+          }
+        }
+      },
+      "security": {
+        "pairingMode": "strict"
+      }
+    
+
+
       "agents": {
         "defaults": {
           "workspace": "~/.openclaw/workspace"
diff --git a/apps/base/customer1/openclaw/deployment.yaml b/apps/base/customer1/openclaw/deployment.yaml
index 7531844..d8943d9 100644
--- a/apps/base/customer1/openclaw/deployment.yaml
+++ b/apps/base/customer1/openclaw/deployment.yaml
@@ -79,11 +79,12 @@ spec:
                   name: openclaw-secrets
                   key: ANTHROPIC_API_KEY
                   optional: true
-            - name: OPENAI_API_KEY
+            
+            - name: TELEGRAM_BOT_TOKEN
               valueFrom:
                 secretKeyRef:
                   name: openclaw-secrets
-                  key: OPENAI_API_KEY
+                  key: TELEGRAM_BOT_TOKEN 
                   optional: true
             - name: GEMINI_API_KEY
               valueFrom:
@@ -99,10 +100,10 @@ spec:
                   optional: true
           resources:
             requests:
-              memory: 512Mi
+              memory: 2Gi
               cpu: 250m
             limits:
-              memory: 4Gi
+              memory: 6Gi
               cpu: "1"
           livenessProbe:
             exec:
diff --git a/apps/base/customer1/openclaw/openclaw-secrets.yaml b/apps/base/customer1/openclaw/openclaw-secrets.yaml
index 026a667..03d989d 100644
--- a/apps/base/customer1/openclaw/openclaw-secrets.yaml
+++ b/apps/base/customer1/openclaw/openclaw-secrets.yaml
@@ -1,24 +1,10 @@
 apiVersion: v1
 data:
-    GEMINI_API_KEY: ENC[AES256_GCM,data:uAwqMc6chYD8BeOOhxExHzdPClFHy3A2346f7Yt43XvebH0t/qC5gZWFC5GWvOWT6BI8l9szsMGWC1SADYlb5QnW5iCI9stQ,iv:WSCMH0UtamnUrarSd9mGGoFbqc7M6cBzecAJvK9UvAk=,tag:2kZ14+1qDsyYDk5JoCQEPQ==,type:str]
-    OPENCLAW_GATEWAY_TOKEN: ENC[AES256_GCM,data:hRfU3vGUFsQ1pLo+IJM/QjNZdgExbew/xGBQEidP3uMFfpfmaYPBYGNM5NmRYLR7RYy98Co+DKU/EK2IuMMVsyxidkPEIyNuVPjirWXADxpnr7qvGgoi7w==,iv:4ofuXyr4iFC0I/u1kk5WxZ58PHzbU/jkPvcFwBApmH4=,tag:RlDqbTIhf0+J7CnIWH86Zw==,type:str]
+  GEMINI_API_KEY: QVEuQWI4Uk42TGNDQjRsY21SYmRkVXZGb2EzTDBQMEpWY2R4VmZHVEt2Wmc0OG9fZE9QaVE=
+  OPENCLAW_GATEWAY_TOKEN: YzRmOGU0ZWM1MzQ1M2FlMjVjMTJkOWY5OTU3MjQ1Y2Y0OTkzODIyNzEwZjUxNzA1M2Y5M2IzMzg1MGRlNjNkNg==
+  TELEGRAM_BOT_TOKEN: ODY0NTkxNTgzODpBQUd4NVZyOWkxZWRhR3p3TUtiY1VLbFZfN1pjT3hVeHZndw==
 kind: Secret
 metadata:
-    creationTimestamp: null
-    name: openclaw-secrets
-    namespace: customer1
-sops:
-    age:
-        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1cDJXYjdTR0xteEtRRUZT
-            YXZnQitKNWZoRGZRL0ZwV1VLZDBLQ3R3bDBVCkNoalRTaWV0OWgvcUZBWHZBYk5i
-            M2VoQ0dFRlJzYmYzY283allLU3N5YVEKLS0tIHhwQit0WFNHMlY0VWJSOW12bE1Z
-            SHZoc2lkZEdYVUp1ZWJEYVF4STRzOGcKZUCxyHMFR7PYhrx7I/Owy6KXbn7WeLML
-            9V+fJCIuCJzMbnYGrs0rIgVxs7PhDNjmWEJ0HugJ/aGq1P+8AJrxVQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-18T03:19:43Z"
-    mac: ENC[AES256_GCM,data:OMMlcv+BnwlpbyK3NsspYp8GpSFTxCpH/WRSNaJ1vaGvTV+LPECto6Vhfl/gfw0MZkY50lcIKb2XZ+vfSfptgTaB/70J6gVxh+elrMnCbozA0HPoSsU1TzqdK3UuupoNjboaIUcVfx3HV+ttT4BEwjnk7mNSSwwDAvV5GF4vxlI=,iv:FNBEFc7XP9b5NhMl9qHSBLtxs5zyqlB/by6YMCQZl7g=,tag:HJXHL876qR4OwDEc8O2meA==,type:str]
-    encrypted_regex: ^(data|stringData)$
-    version: 3.11.0
+  creationTimestamp: null
+  name: openclaw-secrets
+  namespace: customer1
diff --git a/openclaw-gatway-key.txt b/openclaw-gatway-key.txt
new file mode 100644
index 0000000..d90e6d8
--- /dev/null
+++ b/openclaw-gatway-key.txt
@@ -0,0 +1 @@
+c4f8e4ec53453ae25c12d9f9957245cf4993822710f517053f93b33850de63d6