dsh-remote-access: Multi-Mode Remote Access Plugin for DeepSeek Harness
The dsh-remote-access plugin provides a secure remote access solution for local DSH through a Caddy reverse proxy. It supports three modes: LAN, Tailscale, and Cloudflare Tunnel, and features API allowlist policies, unified gateway handling, automatic TLS, and authentication. Users can install it via a command, configure policies on the settings page, and use a diagnostic script to check network status. The plugin addresses the need to expose local DSH over a LAN or the public internet, but note that the API allowlist is not a sandbox, and the Tunnel-only mode lacks identity authentication.
Read Moredsh-auth: Add Admin Login for DeepSeek Harness Web
dsh-auth is a non-official community plugin for DeepSeek Harness (version 0.2.3), designed to add secure HTTPS administrator login for the DSH Web application running exclusively on the local loopback address. Maintained by hxy91819, the core mechanism involves introducing the project's Caddy `forward_auth` edge service to uniformly intercept requests for pages, APIs, downloads, SSE, and WebSocket connections, ensuring access security when not logged in. Its core capabilities include: support for interactive or non-interactive JSON configuration; password or login token storage via Argon2id hashing to avoid plaintext storage; automatic TLS certificates by default to enable HTTPS; and independent execution of `dsh-auth-caddy.service`.
Read More