Introduction¶

DeepSeek Harness (DSH) listens only on the local loopback address (127.0.0.1) by default, so phones, tablets, or other devices cannot access the Web console from external locations. dsh-remote-mobile enables secure access over Tailscale virtual private networks and local area networks without modifying DSH’s underlying code, using access-control middleware and request isolation.

What Is This¶

dsh-remote-mobile is a secure gateway plugin for remote and mobile access, developed by IceApriler. It provides DSH with LAN and Tailscale connectivity, QR-code pairing, RSA transport-layer encryption, and brute-force protection, and includes style adaptations for mobile interfaces.

Core Capabilities¶

• Network Access: Supports access via Tailscale virtual private networks and local area networks (LAN / Wi-Fi).
• Pairing and Authentication: Supports quick pairing with a QR code, RSA transport-layer encryption, and scrypt slow-hash password storage.
• Security Protection: Includes brute-force protection with rate limiting and an intelligent mechanism for passing through static resources.
• Mobile Adaptation: Includes built-in mobile style adaptations and supports real-time status updates via SSE.
• Plugin Coexistence: Provides a general-purpose coexistence protection mechanism for plugins.

Installation and Enablement¶

1. Install the Plugin
   Run the official plugin installation command:

    dsh plugin --profile web add dsh-remote-mobile

2. Configure External Listening
   DSH listens only on 127.0.0.1 by default. You must modify the configuration file to allow access from the LAN/Tailscale.
   The configuration file path is ~/.dsh/profiles/web/cordis.patch.yml (on Windows: %USERPROFILE%\.dsh\profiles\web).

   Add the following content to the configuration file:

    - id: webserver
      name: '@deepseek-ai/dsh-host-webserver'
      inject: [webStartup]
      config:
        host: '0.0.0.0'
        port: 3080

3. Start the Service
   Start the DSH Web service:

    dsh web --no-open

4. Pair with a QR Code
   Open the DSH Web console in a browser, go to the Settings page, and scan the QR code to complete pairing.

Notes¶

• Configuration Notes: You do not need to manually register id: remote-mobile in cordis.patch.yml. The DSH Bundle system handles it automatically.
• Ecosystem Plugin Conflicts: It is not recommended to install the @linxin666/dsh-web-all bundle. Install individual plugins as needed to avoid duplicate mobile floating entry points and gesture interaction conflicts.
• Runtime Permissions: The plugin runs with the permissions of the current DSH process. It is recommended to review the source code and license before installation.

Summary¶

dsh-remote-mobile addresses DSH’s default network restrictions by providing a secure external access channel through middleware and encryption mechanisms, and it includes mobile-oriented adaptations. For more details, see the Directory Page or the GitHub Repository.