DeepSeek Harness LAN Access Plugin
DSH's Web profile allows local access only by default. The `dsh-lan-access` plugin uses a Bundle Patch to override the configuration, resolving API errors and permission issues when accessing via a LAN IP through a mobile browser. **Core features** include: overriding `webserver.host` to `0.0.0.0` to listen on all network interfaces; injecting a `randomUUID` shim for non-secure context compatibility; automatically adding the LAN IPv4 address to the `/api` trusted list. **Installation** requires running `dsh plugin --profile web add ...` in the `web` profile, then restarting the service after installation. To **use** it, access it via `http://<LAN IP`
Read MoreDeepSeek Harness LAN Access Plugin: Enabling Local Network Access Control
The `dsh-lan-access` plugin lifts the default access restrictions on the DeepSeek Harness (DSH) Web GUI, allowing it to be accessed within a virtual LAN or trusted local network. It supports binding to all interfaces, configuring controlled trust boundaries, and selecting LAN IPs. Before use, install the plugin and restart the service. After enabling it, take extreme care with security risks; never enable it on public networks or in uncontrolled environments, as this may lead to remote code execution risks.
Read Moredsh-lan-access: Add LAN access switch in DSH Web
`dsh-lan-access` is a DSH Web plugin designed to simplify the configuration management of DSH LAN access. By default, DSH binds only to the loopback address (127.0.0.1) to ensure security and refuses to bind to 0.0.0.0. This plugin provides a "LAN access" toggle in the `Settings → General` interface, allowing users to flexibly switch the binding address within a trusted local network: when enabled, it binds to 0.0.0.0, enabling devices on the same network segment to access it via `http://<LAN-IP>:3080`; when disabled, it reverts to 127.0.0.1. The core functionality of the plugin requires no modification of the DSH core code; it achieves state reading, writing, and configuration synchronization by registering secure JSON routes, and supports access to the remote settings page as well as browser compatibility patches. Installation requires executing...
Read More