Hey, welcome! 🙌 Great questions — and you're thinking about this the right way. Let me clear up a few things so you don't go down the wrong rabbit hole. On the Tailscale idea — skip it. I know it sounds like a good fit, but it's not the move here. Tailscale is a VPN overlay — it helps you reach a machine securely, it doesn't isolate OpenClaw from your home network. And the way my setup works, there's nothing left to route through Tailscale anyway (more on that in a sec). The "no guest network" problem is already solved. In the Security Part 1 video (Local Fortress), I show you how to bind Docker's port to 127.0.0.1 — meaning OpenClaw only listens on localhost. Nothing else on your home network can reach it, even without a guest network. That's your isolation sorted. You have two paths depending on what you actually want: 👉 Option A — Local Docker setup (Security Part 1) Run OpenClaw on your home machine. Docker + the agent sandbox (yes, the microVM approach you heard about) is all covered step by step. The classroom install guide works fine as the base, but the Security Part 1 video is what you want to follow — it's the secure version of the install. 👉 Option B — VPS on Hostinger (Security Part 2) This is the one that gives you iPhone access. The way it works: the Web UI gets locked at the end of the setup, and all access goes through Telegram. Telegram runs as an outbound connection from the server — no ports need to be open, no Tailscale needed, SSH is closed. Your iPhone just uses the Telegram bot. It's actually simpler than it sounds, and Hostinger does the Docker setup for you with a 1-click install. My suggestion: If you're new to Docker, start with Part 1 to get comfortable. If you want always-on iPhone access from day one, jump straight to Part 2 — it's honestly the easier path because Hostinger handles a lot of the complexity. What OS are you running? (Mac / Windows / Linux?) That affects a couple of the Part 1 steps and I can point you to the right bits 👇