diff --git a/Personal/Areas/Servers/TrueNAS/OpenClaw.md b/Personal/Areas/Servers/TrueNAS/OpenClaw.md
index 38dced9..2639b6d 100644
--- a/Personal/Areas/Servers/TrueNAS/OpenClaw.md
+++ b/Personal/Areas/Servers/TrueNAS/OpenClaw.md
@@ -162,7 +162,11 @@ docker compose run --rm openclaw-cli pairing approve telegram <CODE>
 - Check gateway status: `docker compose run --rm openclaw-cli gateway status`
 - View logs: `docker logs -f openclaw`
 - Run diagnostics: `docker compose run --rm openclaw-cli doctor`
-- Access Control UI: `http://<truenas-ip>:18789/`
+- Access Control UI via SSH tunnel:
+  ```bash
+  ssh -L 18789:localhost:18789 truenas_admin@<truenas-ip>
+  ```
+  Then open `http://localhost:18789/` (must be localhost — the UI requires HTTPS or localhost)
 
 ## 7. Security Considerations