dsh-simple-auth: DeepSeek Harness Ultra-Lightweight Login Gateway
`dsh-simple-auth` is an ultra-lightweight web plugin for DeepSeek Harness (DSH) intended to replace complex login solutions. It provides access control via shared keys or primary/guest keys, and supports ACL-based session isolation and sharing. It employs a "fail-closed" strategy to ensure security and reliability. Users can install it using the `dsh plugin` command and configure options such as keys and session TTL in `cordis.patch.yml`. After installation, the `DSH_SIMPLE_AUTH_KEY` environment variable must be set and the service restarted. Note that it only handles access control, does not substitute for TLS, and shares real-time agents rather than plain text.
Read Moredsh-secure-gate: DeepSeek Harness Advanced Security Authentication Gateway
dsh-secure-gate is a DeepSeek Harness plugin developed by xingjisen, designed to provide enterprise-level security protection for a Web UI. It supports zero-configuration installation and takes effect after a restart, featuring core capabilities such as password security, two-factor authentication, Web security (CSRF/CSP/HSTS), access control, audit monitoring, and attack protection. Users can install it via terminal commands and must create an administrator account upon first access. Note that the plugin runs with the permissions of the current process and is not officially associated with DeepSeek.
Read Moredsh-remote-mobile: Securely Expose LAN and Tailscale Connections Without Modifying DSH's Underlying Code
`dsh-remote-mobile` is a secure gateway plugin developed by IceApriler, designed to address the issue that DeepSeek Harness only listens on the local loopback address by default. Without modifying the underlying code, it uses middleware and encryption techniques (supporting Tailscale, local network access, QR code pairing, and RSA encryption) to provide secure external access for DSH, while also offering a mobile-friendly interface. During installation, the configuration file must be modified to bind to `0.0.0.0`; after startup, users can pair and access it by scanning a QR code.
Read Moredsh-egress-guard: DeepSeek Harness Runtime Security Gateway
dsh-egress-guard is a runtime security plugin for DeepSeek Harness that enforces egress control within the tool invocation pipeline. It provides three core capabilities: intercepting unauthorized network targets via a whitelist before execution, automatically redacting sensitive information after execution, and recording comprehensive audit logs. The plugin runs in `monitor` mode by default and supports progressively building security policies from log analysis. This approach enhances agent security but cannot defend against process-level attacks or malicious traffic bypass protection via Base64 encoding.
Read More