diff --git a/stacks/openclaw/main.tf b/stacks/openclaw/main.tf
index 19a74a23..a1adb2f5 100644
--- a/stacks/openclaw/main.tf
+++ b/stacks/openclaw/main.tf
@@ -112,8 +112,8 @@ resource "kubernetes_config_map" "openclaw_config" {
         profile = "full"
         deny    = []
         exec = {
-          host        = "local"
-          security    = "off"
+          host        = "node"
+          security    = "full"
           ask         = "off"
           pathPrepend = ["/tools", "/workspace/infra"]
         }