dsh-one-gateway: Adding a Loopback Zero Trust Gateway Layer to DSH Web
dsh-one-gateway is a DSH web plugin maintained by TiantianFlow, which places a zero-trust gateway that only listens on the loopback interface in front of DSH. It verifies identity using a precise principal allowlist and supports Tailscale Serve, Cloudflare Access, and Headscale TCP Serve. DSH always remains on 127.0.0.1, and joining a private network does not equate to authorization. This article introduces the installation commands, setup process, three configuration methods for entry points, and their applicable boundaries.
Read Moredsh-undo-savepoint: DSH Crash Recovery Plugin with One-Click Configuration and Code Rollback
dsh-undo-savepoint is a community-maintained DSH undo/snapshot plugin, categorized under admin-security. It automatically or manually takes snapshots of cordis.patch.yml, settings.yaml, .env, and user plugin code trees, supporting undo, redo, and rollback to any version. Keys in snapshots are automatically masked, and exported ZIPs do not reveal plaintext. When DSH fails to start completely, the timeline, safe mode, and session recovery can still be operated via an external WebUI, GUI, and CLI. This article verifies installation commands and typical usage based on the SkillHub directory page and GitHub README, making it suitable for DSH users who frequently experiment with plugins and worry about misconfigurations crashing their environment.
Read More