dsh-tailnet-gateway：经 Tailscale 私网访问本机 DSH，不把 Web 面暴露到公网
dsh-tailnet-gateway 是 OutLawZhangSan-liii 维护的 DSH 插件，在本机 127.0.0.1 提供带 Tailscale 身份校验的反向代理，配合 tailscale serve 与 grant-access.mjs，让 tailnet 内的手机等设备访问 loopback 绑定的 dsh web，而不把服务暴露到公网或放宽 dsh 特权 RPC 栅栏。文章说明链路设计、cordis.patch.yml 挂载方式、Serve 与浏览器授权步骤、配置项及远程侧可用能力边界，并提醒插件与 dsh 同进程权限及本机伪造身份头的风险。
Read Moredsh-plugin-remote-access：DSH 远程访问（限网段）
`dsh-plugin-remote-access` 插件旨在解决 DeepSeek Harness (DSH) 本地访问限制问题，允许用户将 Web GUI 暴露给 Tailscale 等选定网段。该插件支持自定义监听范围、端口自动回退、令牌 URL 及数字密码（30天免密）两种访问方式。它适配 DSH 0.2.1+，支持热重载配置，并针对远程页面提供了移动端布局和专用 UI 设置。配置文件仅存储于单用户目录，无硬编码，确保安全性与灵活性。
Read Moredsh-simple-remote：通过 Tailscale 远程访问 DeepSeek Harness
`dsh-simple-remote` 是 DeepSeek Harness (DSH) 的一个插件，利用 Tailscale 网络隧道，将本地 DSH Web 界面安全暴露给连入同一 Tailnet 的设备。该插件通过反向代理将流量隔离在 Tailscale 地址上，支持自动登录、流式传输及 Host/Origin 防护。安装后，用户可在移动端通过 `http://<你的 tailnet 地址>:3080/` 访问。默认开启 `autoToken`，等同于完全控制权，建议在共享网络中设为 `false`。目前仅支持 IPv4。
Read MoreDSH Remote Console: Enabling Mobile Access to Web Profile via Tailscale Serve
DSH Remote Console is a mobile-enhancement plugin maintained by ZSLsherly, designed to securely expose a local DSH debug environment to mobile browsers via Tailscale Serve. The plugin integrates status monitoring, session management, PWA support, touch optimization, and a sleep-prevention mechanism. It also addresses the mobile limitation of lacking a native directory picker, allowing workspaces to be opened directly by entering an absolute path. Before using it, install Corepack and Tailscale and ensure the computer and phone are on the same Tailnet.
Read Moredsh-auth-tailscale: A DeepSeek Harness Identity Authentication Plugin Built on Tailscale Serve
`dsh-auth-tailscale` is an adapter plugin for DeepSeek Harness (DSH), providing DSH with identity authentication and fine-grained access control based on Tailscale Serve. It leverages user information injected by Tailscale to enforce user-specific access control, general-use restrictions, and administrative permission limits through allowlists and App Capability. Configuration is set through environment variables, and a fail-closed mechanism is used to ensure security. Deployment requires Tailscale Serve to listen on the loopback address, with DSH bound locally. The plugin has no runtime dependencies and is decoupled from DSH versions.
Read Moredsh-webroad: Free Remote Access to DSH Web (Tailscale Funnel)
dsh-webroad is a DeepSeek Harness plugin that leverages Tailscale Funnel to provide a free and simplified web-based remote access solution. It supports QR code login over LAN and public networks, and includes secure and stable features such as PIN authentication, transparent WebSocket forwarding, automatic reconnection, and traffic compression. The `-w` parameter is required during installation. Once installed, you can manage its status via the settings page entry or the CLI. It is ideal for home and general users who want to avoid domain name configuration.
Read Moredsh-remote-tailscale: Access the Local DSH Web UI Across Devices via Tailscale
`dsh-remote-tailscale` is a DSH plugin that uses the Tailscale virtual network to expose the local Web UI to other devices under the same account, without requiring a public network or LAN sharing. It provides an HTTPS secure channel, Loopback proxy, account authentication, and status monitoring. After installation, users only need to enable remote access in DSH settings and connect via the HTTPS port (default 8455) or a QR code. This solution supports port configuration via environment variables; Windows firewall settings should also be checked.
Read More