dsh-totp: TOTP Access Verification for DeepSeek Harness Web Instances
DeepSeek Harness (DSH) introduces the dsh-totp plugin, providing TOTP-based one-time password access control for local web instances. The plugin supports Google/Microsoft Authenticator and offers QR code binding, one-click lock, recovery codes, and account locking, without requiring additional services or relying on third-party account login. It is compatible with various request methods such as Fetch, XHR, and WebSocket, and supports both LAN and remote access. The installation command is `dsh plugin --profile web add dsh-totp`, and it takes effect once launched.
Read Moredsh-remote-gateway: A Secure Reverse Proxy for Remote Access to DeepSeek Harness
The `dsh-remote-gateway` plugin is maintained by RyensX and aims to provide a secure remote access solution for DeepSeek Harness (DSH). It adopts a reverse proxy model: the gateway receives remote requests and handles authentication—including password and IP whitelist support—as well as HTTPS configuration, while the DSH process always listens only on the local `127.0.0.1`, ensuring security. Core features include real-time configuration updates, HTTPS certificate support, IP whitelisting, and Host control. Users need to install it using the official command and configure a password locally on first use. After installation, DSH can be accessed through the gateway address, supporting access via LAN, VPN, or similar tools. This solution is suitable for developers who need to use DSH across multiple devices, but note the dependency on remote tools.
Read MoreDeepSeek Harness Relay: A Plugin for Secure Remote Access to Web Configuration Files
`sorsama/deepseek-harness-relay` is a plugin that provides secure remote access to DeepSeek Harness (DSH). Because DSH binds only to the loopback address by default to avoid network exposure, the plugin meets external access requirements by running a TLS listener and authentication middleware outside Harness. It supports device pairing (QR code/password), password-based login, device revocation, and transparent proxying without modifying Harness core configuration. Installation requires ensuring that Harness is not bound to `0.0.0.0`, and configuring the password and paired devices via the web interface.
Read More