dsh-lan-web-access: LAN Web Access Plugin for DeepSeek Harness
`dsh-lan-web-access` is an MIT-licensed open-source plugin designed for DeepSeek Harness (DSH). By adding logic before login checks, it enables local access without a token, independent listening on a LAN port, and passwordless access via SSH tunneling. The plugin supports device allowlist management, access logging, and multi-system compatibility, but LAN mode carries the risk of unencrypted HTTP transmission and is recommended for use only within a trusted internal network.
Read Moredsh-wsl-expose: Exposing WSL Ports to the Local Network
`dsh-wsl-expose` is a DeepSeek Harness (DSH) plugin designed to enable LAN devices to access services running in WSL. It manages Windows port proxying and, based on the network mode configured in `.wslconfig`, automatically suggests or applies port forwarding rules to provide reliable connectivity. The plugin features a whitelist mechanism, network-mode awareness, and automatic port proxy application. Installation requires running the specified command, and usage must comply with security restrictions, including limiting access to the LAN, using kit relay for the local UI, and prohibiting binding to 0.0.0.0.
Read Moredsh-lan-guard: Securely Expose the DSH Web UI to the LAN
dsh-lan-guard is a LAN access plugin for DeepSeek Harness. It forwards the official UI to the LAN through a reverse proxy, providing self-signed HTTPS and QR code access by default. The plugin features gated reverse proxy, device pairing, blocking mechanisms, and dual password authentication. It is simple to configure, requires no source code modifications, and can be used after installation and restart.
Read Moredshgo: Accessing DSH Web via LAN
`dshgo` is a combination of a plugin and an Android client designed to address the issue that the DSH web interface only listens on the local machine. It exposes the web service to the local area network and supports mobile adaptation, access passwords, and QR code scanning. The plugin bypasses Host/Origin restrictions and provides app-native features such as session notifications and voice input. Installation requires running the specified command, and the configuration can be adjusted via a YAML file, such as changing the port. Please ensure security during use and avoid exposing it to the public internet.
Read MoreDeepSeek Harness LAN Access Plugin
DSH's Web profile allows local access only by default. The `dsh-lan-access` plugin uses a Bundle Patch to override the configuration, resolving API errors and permission issues when accessing via a LAN IP through a mobile browser. **Core features** include: overriding `webserver.host` to `0.0.0.0` to listen on all network interfaces; injecting a `randomUUID` shim for non-secure context compatibility; automatically adding the LAN IPv4 address to the `/api` trusted list. **Installation** requires running `dsh plugin --profile web add ...` in the `web` profile, then restarting the service after installation. To **use** it, access it via `http://<LAN IP`
Read Moredsh-secure-context-fix: Fix Web GUI Loading Issue Over HTTP in LAN Environments
`dsh-secure-context-fix` is a plugin for DeepSeek Harness (DSH) designed to resolve the issue where the Web GUI cannot use `crypto.randomUUID` over HTTP on a local network. The plugin registers a transform via `webServer.tapIndex` to inject a `crypto.randomUUID` polyfill into the HTML, restoring workspace loading, directory selection, and session creation. After installation, the Web service should be bound to `0.0.0.0` in the configuration file, and a firewall is recommended to restrict access to the local network subnet for security. This solution does not require source code changes and is suitable as a temporary fix until the official code is updated.
Read MoreDeepSeek Harness Remote Control Plugin
DSH (DeepSeek Harness) provides the `hw-cola/dsh-remote-control` plugin, which addresses the limitation that the default local mode prevents accessing the WebUI from a mobile phone. The plugin starts a Node child process to establish a reverse proxy and uses QR code authorization with signed-token verification to enforce LAN access control. Core features include automatic LAN IP detection, generation of time-limited QR codes, QR code scanning with signature verification, and device whitelist management. It also automatically injects polyfills to handle non-secure contexts and configures the Windows firewall. Users must restart DSH and be aware that communication is in plaintext; use it only in trusted networks and disable the switch after use.
Read Moredsh-tcp-forward: Exposing DeepSeek Harness Web to the Local Network
`dsh-tcp-forward` is a community plugin for DeepSeek Harness (DSH) designed to address access restrictions on local networks. It uses a transparent TCP forwarding mechanism to expose the DSH Web service to the local network and automatically adds the listening address to `trustedHosts` to avoid errors. Installation requires specifying a Web configuration file. By default, it listens on `0.0.0.0:3081`, and the port can be customized via the `DSH_TCP_FORWARD_PORT` environment variable. The plugin runs as a module, and developers are advised to review the source code and the MIT license before using it.
Read MoreDeepSeek Harness LAN Access Plugin: Enabling Local Network Access Control
The `dsh-lan-access` plugin lifts the default access restrictions on the DeepSeek Harness (DSH) Web GUI, allowing it to be accessed within a virtual LAN or trusted local network. It supports binding to all interfaces, configuring controlled trust boundaries, and selecting LAN IPs. Before use, install the plugin and restart the service. After enabling it, take extreme care with security risks; never enable it on public networks or in uncontrolled environments, as this may lead to remote code execution risks.
Read Moredsh-local-link: DeepSeek Harness Local LAN Access Plugin
`dsh-local-link` is a lightweight DSH plugin developed by donoteatme, designed to address the need for multi-device session viewing in Web mode. It requires no relay server or cloud service and enables devices on the same local area network to connect to the current session by scanning a QR code or using a one-time link. The plugin supports mobile devices and automatically switches to a responsive view when the viewport width is smaller than 834 CSS pixels. It is easy to set up and use, with a default invitation code that is valid for one-time use only, intended for trusted private networks.
Read Moredsh-web-url-view: Fixed Access URLs for the DSH Desktop and Web Interfaces
The `dsh-web-url-view` plugin is designed to resolve the issue where random ports in DeepSeek Harness Desktop and the Web GUI prevent bookmarking or local network access. It runs a fixed-port reverse proxy in-process, providing a stable fixed address for direct access from devices on the local network while automatically performing the authentication handshake. The plugin supports HTTP and WebSocket, allowing users to view the fixed address and current address in the settings menu. By default, it binds to `0.0.0.0`, so local network security risks should be considered; the port and binding interface can be modified via the configuration file.
Read Moredsh-loopback-bridge: Make the DSH Web Settings Page Writable on Local and Public Networks
The `dsh-loopback-bridge` plugin injects logic that tricks the browser, resolving the issue that the DSH web settings page supports localhost access only by default and enabling remote configuration over a LAN or public network. The plugin can be installed independently without affecting the official package, and it takes effect immediately after installation. Installation requires the `--trusted-host` parameter, and version compatibility should also be considered. When used in a public network environment, it must be paired with an authentication layer to ensure security.
Read MoreDeepSeek Harness Mobile Access Plugin
The DeepSeek Harness (DSH) plugin provides a secure mobile entry point for the desktop app by running a standalone in-process HTTP listener. It is served under the `/m/` path and supports 8-digit PIN login, streaming responses, session management, and dark mode. The desktop settings page controls the master switch, network mode (LAN/Tunnel), and session management. In terms of security, the plugin uses scrypt-based PIN protection, hashed token storage, and brute-force protection. Users can install the plugin and configure the network to continue sessions on their mobile device, but should note that LAN mode carries a plaintext transmission risk.
Read MoreDeepSeek Harness (DSH) LAN Access Plugin: dsh-mobile-gateway
The `dsh-mobile-gateway` plugin resolves the issue where the official `dsh web` listens only on `127.0.0.1` by default, preventing mobile connections. It enables LAN access by overriding the configuration and mounts the `/m/api` route. The plugin provides full RPC forwarding, real-time message push, approval responses, and large image sending, with Token authentication. Users can generate a pairing QR code or configure a Token manually to connect a mobile app on the same Wi-Fi and manage DSH.
Read MoreIntroducing the DeepSeek Harness Plugin: dsh-lanmode
`dsh-lanmode` is an enhanced LAN access plugin designed specifically for the DeepSeek Harness WebUI, aimed at addressing the limitations on non-local access under default security policies. By generating a Root CA certificate to support HTTPS, it unlocks browser security APIs such as microphone, clipboard, and file uploads. It also provides mDNS domain resolution (e.g., dsh.local), PWA support, quick access via QR code, and browser API polyfills. Installation requires DeepSeek Harness 0.1.7+ and Node.js 20+, making it suitable for developers who need voice interaction and remote access within a LAN.
Read Moredsh-web-lan: DeepSeek Harness LAN Access Layer
`dsh-web-lan` is a LAN access plugin for the DeepSeek Harness (DSH) Web service, maintained by developer yes8080. It wraps request handling to address compatibility issues in HTTP-only LAN environments, provides a password-based login gate and access control, supports managing the password directly in the Web UI, and fixes errors related to `crypto.randomUUID` and the client `isLoopback`. After installation, the service listens on a local network address (default port 3080) with a default password of `123`. Because passwords and data are transmitted in plaintext over HTTP, it is suitable only for trusted LAN environments. Change the password immediately after installation or override it via an environment variable. To remove it, uninstall the plugin through a command and clean up any leftover data.
Read Moredsh-lan: DSH LAN Exposure and Balance Query Plugin
`dsh-lan` is a DeepSeek Harness (DSH) plugin designed to address the security risks associated with Web runtimes bound only to the local loopback address and API key exposure. It enables LAN access by changing the bind address to `0.0.0.0` and provides a local RPC interface for scripts to securely query balances without uploading the API key. Installation requires editing the configuration file; once started, it can be used within a trusted network.
Read MoreDSH Network Plugin: Access DeepSeek Harness over LAN, Tailnet, or HTTPS Endpoints
By default, DeepSeek Harness (DSH) binds only to the local loopback address, limiting remote access. The DSH Network plugin sits in front of DSH as an authentication gateway, supporting LAN, Tailnet, and custom HTTPS connections. It allows one-time pairing to bind multiple routes and can be installed and enabled using the official command. The default gateway listens on port 3081; configuration parameters include the listen address, hostname, and iOS app download link. Note that DSH remains bound to the loopback address, and this plugin does not manage DNS, certificates, or firewall settings. Pairing tickets are one-time and intended only for short-term access.
Read Moredsh-lan-access: Add LAN access switch in DSH Web
`dsh-lan-access` is a DSH Web plugin designed to simplify the configuration management of DSH LAN access. By default, DSH binds only to the loopback address (127.0.0.1) to ensure security and refuses to bind to 0.0.0.0. This plugin provides a "LAN access" toggle in the `Settings → General` interface, allowing users to flexibly switch the binding address within a trusted local network: when enabled, it binds to 0.0.0.0, enabling devices on the same network segment to access it via `http://<LAN-IP>:3080`; when disabled, it reverts to 127.0.0.1. The core functionality of the plugin requires no modification of the DSH core code; it achieves state reading, writing, and configuration synchronization by registering secure JSON routes, and supports access to the remote settings page as well as browser compatibility patches. Installation requires executing...
Read Moredsh-mobile: Accessing DeepSeek Harness Web GUI on iPhone / iPad
dsh-mobile is an MIT-licensed plugin for DeepSeek Harness (DSH), designed to address the need for accessing the local Harness Web GUI on iOS devices. The plugin launches a LAN reverse proxy (default port 3080) to forward HTTP and WebSocket requests, and injects iOS PWA meta information along with mobile-specific CSS to optimize touch interaction, safe area, and soft keyboard experiences, supporting access similar to a native app via Safari's "Add to Home Screen". Core features include: providing a `/mobile` QR code page for obtaining the access address, supporting configurable IP whitelists to restrict access sources, and a security context patch that fixes the unavailability of `randomUUID` on mobile devices. After installation, it needs to be configured in `cordi
Read Moredsh-remote-link: Securely Expose DSH Web UI to LAN with Agent Session Forking Support
dsh-remote-link is a DSH plugin designed to address the challenge of securely accessing the local DSH Web UI from a mobile phone or LAN device. It authenticates on a dedicated gateway port and reverse-proxies to the loopback address, thereby avoiding security risks associated with directly exposing the Web UI. Key features include: 1. **Secure Remote Access**: Supports one-time QR code pairing, HMAC challenge-response, and HttpOnly Cookie session management, replacing long-term credentials. 2. **Status and Monitoring**: Provides a `/status` page that displays link status, device identity, heartbeat, and upstream health, along with support for host telemetry data subscription. 3. **Model Enhancement**: Introduces a `fork_session` tool, allowing the model to create sub-sessions based on recently completed rounds, facilitating exploratory...
Read Moredsh-lan-access: Enabling Access to the DSH Web GUI Within the Local Area Network
dsh-lan-access is a DSH network access tool plugin maintained by Leon0555 (MIT, v0.1.3). It binds the Web GUI to 0.0.0.0, injects a crypto.randomUUID polyfill to fix RPC failures over HTTP in LAN, and supports narrow-screen mobile layout since v0.1.2. One-click npm installation: dsh plugin --profile web add dsh-lan-access. Restricted to trusted internal networks: no authentication, and the configuration/credential interfaces remain accessible only via localhost loopback.
Read Moredsh-web-lan-access: Enable DSH Web UI for LAN HTTP Access
dsh-web-lan-access is a DSH Web plugin maintained by AcidGr, designed to resolve the issue where crypto.randomUUID is unavailable when accessing via plaintext HTTP on non-loopback addresses, which prevents sessions and models from loading. The plugin injects a polyfill through webServer.tapIndex, automatically binds the webserver to 0.0.0.0, and extends the /api trust fence to cover LAN and Tailscale IPs. Installation is performed with the command `dsh plugin --profile web add dsh-web-lan-access`, and once started, remote access is available via http://<server-ip>:3080. Note the security risks of exposing 0.0.0.0, as well as the known limitation that certain APIs, such as settings/credentials, remain restricted to loopback only.
Read MoreMake DeepSeek Harness Web UI support LAN access via dsh-web-lan-access
DeepSeek Harness Web UI works normally only on localhost by default. When accessing via pure HTTP in a local area network, the front end will fail to render sessions and models due to the lack of `crypto.randomUUID` in a secure context. The community plugin *dsh-web-lan-access* (maintained by AcidGr, MIT licensed, npm version 1.1.0) injects polyfills through the official `index-tap` and binds the webserver to `0.0.0.0`. This article organizes installation commands, LAN/Tailscale usage methods, verification steps, and precautions such as unauthenticated exposure and the settings page only being accessible via loopback, based on the directory page and GitHub documentation.
Read More