dsh-login-gateway：为 DSH Web UI 增加登录门卫与反向代理
dsh-login-gateway 是由 runfali 开发的 DeepSeek Harness 插件，旨在为仅监听本地回环地址的 dsh Web UI 提供受控的外部访问入口。该插件在 0.0.0.0:3081 提供用户名密码登录界面，认证通过后，将 HTTP 与 WebSocket 请求全量反向代理至本地 3080 端口，并自动改写请求头以通过 dsh 的信任校验。项目基于 Node.js 22+ 开发，零运行时依赖且采用 MIT 许可证，安装过程不修改 dsh 原有文件或配置，属于零侵入式设计。核心安全特性包括基于 IP 和用户名的登录限速、会话绑定 User-Agent、改密自动吊销
Read Morerice-awa/dsh-lan-gateway：把 DSH Web GUI 安全开放到局域网/公网的插件
rice-awa/dsh-lan-gateway 是一个 DSH 插件，旨在安全地将 DSH Web GUI 开放至局域网或公网。它通过反向代理网关解决 DSH 仅绑定 127.0.0.1 导致其他设备无法访问，以及直接监听 0.0.0.0 带来的安全风险矛盾。该插件保持 DSH 本地绑定，另起网关转发请求，并实施来源分级策略：LAN 与本机来源免密访问，非 LAN 来源需通过登录页及 HMAC 会话 Cookie 验证。插件支持可选 TLS（自签名或自定义证书）、速率限制、CSRF 防护及热配置管理。用户可通过 `lan_gateway` 命令或 DSH 对话进行启用、密码设置及状态监控。密
Read MoreNginx Load Balancing: Simple Configuration for Multi-Server Traffic Distribution
This article introduces Nginx load balancing configuration to solve the problem of excessive load on a single server. At least two backend servers running the same service are required, with Nginx installed and the backend ports open. The core configuration consists of two steps: first, define the backend server group using `upstream` (supporting round-robin, weight, and health checks, e.g., `server 192.168.1.100:8080 weight=2;` or `max_fails=2 fail_timeout=10s`); second, configure `proxy_pass` to this group in the `server` block, passing the client's `Host` and real IP (`proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr;`). Verification involves running `nginx -t` to check syntax, `nginx -s reload` to restart, and testing access to confirm request distribution. Common issues such as unresponsive backends or configuration errors can be resolved by checking firewalls and logs. Advanced strategies include IP hashing (`ip_hash`) and URL hashing (requires additional module).
Read More