Remote access gateway for the DSH Web GUI: login auth plus an HTTP/WebSocket reverse proxy to the loopback server, no --trusted-host needed.
Install
# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)
dsh plugin --profile web add github:siberiah2o/dsh-plugin-remote
Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time. Only install sources you trust, and pin a commit (github:owner/repo#sha).
README
Remote access gateway for the DeepSeek Harness (DSH) Web GUI — login auth + HTTP/WebSocket reverse proxy to the loopback DSH server.
中文 · MIT
Install
dsh plugin --profile web add dsh-plugin-remote && dsh web
Note: this is a DSH (DeepSeek Harness) plugin — install it into a profile through
dsh plugin(or the profile's dependencies) so the gateway and its settings panel activate; a plainnpm ialone does not wire it in.
Screenshots
| Login | Settings → Remote Access |
|---|---|
 |
 |
Features
- Login-gated remote access: scrypt credentials + HttpOnly session cookie; HTTP/WebSocket reverse proxy with Host/Origin rewriting — no
--trusted-hostneeded - White-themed login page (shadcn/ui, mobile-friendly) with the DeepSeek Harness brand
- Settings panel (DSH GUI → Settings → Remote Access):
- Remote-access whitelist (IP / CIDR; loopback always allowed; hot-reloaded)
- Account password changes (old sessions revoked immediately)
- Request log: every request persisted to per-day JSONL shards, download + 1/3/7-day retention rules
- Localized zh/en, follows the GUI language
- Zero runtime dependencies (node:http/https); the Next.js login app lives inside
gateway/
Usage
- Open
http://<server-ip>:4080— the first visit creates the only account - Manage accounts:
node lib/remote-passwd.mjs add|set-password|list|del <username> - Data lives under
$DSH_HOME/plugin-data/dsh-plugin-remote/(users.json,whitelist.json,logs/)
License
MIT
Links
More in this category
mexiaosqwq/dsh-web-mobile★ 27
Mobile-adaptive layout for the DSH Web UI: the sidebar becomes a content-hugging overlay drawer, the conversation gets the full width, and the settings panel becomes a near-full-width sheet.
AcidGr/dsh-web-lan-access★ 20
LAN/remote access for the Web UI: injects a crypto.randomUUID polyfill on plain-HTTP origins so the frontend survives LAN or Tailscale IP direct links.
liguobao/deepseek-harness-remote★ 17
Secure multi-device remote access for DeepSeek Harness: connect from your phone or browser to your local Harness over an end-to-end encrypted channel (Noise IK with a WebRTC-ready adaptive transport), with device authorization and ApiProxy-only remote capabilities, no shell or arbitrary file access.
JUANWANG-BUAA/dsh-full-remote★ 15
Remote DeepSeek Harness with full server-side API access (`settings.*` / `credentials.*` / `host.listDirectory`). Token-gated reverse proxy, per-device sessions, phone invite QR, fence self-check, optional approval / CIDR / idle timeout / local TLS, WebSocket/SSE.
Blank-not-black/dsh-Remote#plugin★ 9
Mobile remote-control suite: bundle plugin with native sidebar entry and admin drawer, self-healing bearer-token gateway over LAN/Tailscale, Android app (sessions/approvals/questions/goals), /fs/* file transfer (Range resume, 2GB upload), latency-based multi-server auto-switch, offline chat cache.
Leon0555/dsh-lan-access★ 7
LAN access for the Web GUI: 0.0.0.0 bind plus a crypto.randomUUID polyfill for non-secure (LAN HTTP) contexts.