Add private realtime Talk for OpenClaw

compose.yaml

@@ -732,14 +732,16 @@ services:
       WHISPER_HOST: 0.0.0.0
       WHISPER_PORT: "8084"
       WHISPER_CLI: /opt/whisper.cpp/build/bin/whisper-cli
-      WHISPER_MODEL: /models/ggml-large-v3-turbo.bin
-      WHISPER_MODEL_URL: ${WHISPER_MODEL_URL:-https://huggingface.co/ggerganov/whisper.cpp/resolve/main/ggml-large-v3-turbo.bin}
+      WHISPER_MODEL: /models/ggml-small.bin
+      WHISPER_MODEL_URL: ${WHISPER_MODEL_URL:-https://huggingface.co/ggerganov/whisper.cpp/resolve/main/ggml-small.bin}
+      WHISPER_SERVER_PORT: "8085"
       WHISPER_THREADS: ${WHISPER_THREADS:-8}
       WHISPER_LANGUAGE: ${WHISPER_LANGUAGE:-de}
     networks: [frontend, inference]
     security_opt: ["no-new-privileges:true"]
     cap_drop: [ALL]
-    cap_add: [CHOWN, SETUID, SETGID]
+    # The entrypoint supervises whisper-server after dropping it to uid 10004.
+    cap_add: [CHOWN, SETUID, SETGID, KILL]
     healthcheck:
       test: [CMD, curl, -fsS, "http://127.0.0.1:8084/status"]
       interval: 10s