dsh-login-gate：为 DSH 网页入口加一道密码
dsh-login-gate 是 duwenlong2 维护的 DSH admin-security 插件，在 web 监听前增加网页密码门禁：首次访问浏览器设密、scrypt 与 Windows DPAPI 存储、7 天会话、失败限流与忘记密码重置流程。适用于 Windows + Node 20+，通过插件中心或 dsh plugin --profile web 安装。文章介绍安装、bundles 配置、日常使用、cordis.patch.yml 选项及与 launch token 的差异，并说明进程权限与兼容性边界。
Read Moredsh-lock: Web Password Gate for DeepSeek Harness
`dsh-lock` is an interface security plugin for DeepSeek Harness (DSH) that prevents direct operation by others through a fullscreen overlay and password verification. It supports manual locking, configurable automatic locking, and stores passwords using scrypt one-way hashing, generating only short-lived tokens. The installation command is `dsh plugin --profile web add github:felixpu/dsh-lock`, and a restart is required for it to take effect. This plugin provides UI access control only and does not involve disk encryption. When using it, make sure to configure the `locale` directory to ensure proper bilingual Chinese and English support.
Read Moredsh-lan-pass: LAN Password Access Control
The `dsh-lan-pass` plugin provides LAN password access control for the DSH Web UI, supporting direct access from phones and tablets with real-time synchronization. After installation, the default key is `deepseekyyds`; it is recommended to change it via environment variables or a configuration file. Before using it, start the service listening on `0.0.0.0` and open port 3080. regarding security, the plugin performs server-side validation but does not include global middleware, creating a risk that unauthenticated devices may access the API directly. It is recommended only for use on trusted LANs with a strong password.
Read More