dsh-lan-gateway
LAN/internet reverse-proxy gateway for the DeepSeek Harness web GUI: keeps dsh on loopback, exposes 0.0.0.0 with login + HMAC cookie for non-LAN sources (LAN and loopback are proxied without a password by default), optional self-signed or custom TLS, and a Settings card. Includes an insecure-origin UUID shim so workspaces open over plain-HTTP LAN addresses.
DeepSeek Harness Web GUI 的局域网/公网反向代理网关：dsh 仍绑定回环，本插件在 0.0.0.0 提供登录+HMAC Cookie（仅对非局域网来源生效，局域网与回环来源默认免密直连）、可选自签名或自定义 TLS 与官方设置页卡片。自带不安全源 UUID shim，让局域网纯 HTTP 地址也能正常打开工作区。
How to install
dsh plugin add @riceawa/dsh-lan-gateway About
把 DeepSeek Harness 的 Web GUI 安全地开放到局域网 / 公网。 附带**不安全源 UUID shim**：网关以纯 HTTP 局域网地址服务页面时，浏览器不提供 crypto.randomUUID，本插件的 client bundle 会在页面加载早期自动补上 getRandomValues 版实现，让工作区（含其他设备打开的工作区）在网关下正常打开。 附带**TLS 支持**：可用自动生成并持久化的**自签名证书**，或挂载**自己申请/签发的 PEM 证书**，让网关以 HTTPS 服务（自签名证书首次访问会看到浏览器警告，属预期行为）。 dsh 的 web CLI 会硬拒绝 --host 0.0.0.0（避免把远程代码执行暴露到网络），所以本插件 让 dsh 继续只绑 127.0.0.1，自己另起一个 0.0.0.0 反向代理网关转发到 loopback 端口， 改写 Host/Origin 以通过 /api 信任围栏。**LAN 与 loopback 来源免密代理；非 LAN 来源 必须先完成登录页并出示 HMAC cookie。** 特性 **双端一体**：host 端是反向代理网关（登录 / HMAC cookie / 信任围栏 / TLS）；client 端是 不安全源 UUID shim + **官方设置页卡片**（DSH Settings…
Recommendation signals
Meta
- License
- MIT
- Language
- TypeScript
- GitHub stars
- 3
- mo. downloads
- –
- Last push
- 2026-08-28
- Created
- 2026-08-16
Basic safety check
- Findings
- None
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- Topics
- deepseek-harness, deepseek-harness-plugins, dsh, dsh-plugin, gateway, nodejs, plugin-discovery
Related plugins
dsh-full-remote
JUANWANG-BUAA/dsh-full-remote
Remote DeepSeek Harness with full server-side API access (`settings.*` / `credentials.*` / `host.listDirectory`). Token-gated reverse proxy, per-device sessions, phone invite QR, fence self-check, optional approval / CIDR / idle timeout / local TLS, WebSocket/SSE.
dsh-web
zhu1090093659/dsh-web-ui/tree/main/packages/dsh-remote-web-ui
Remote control of a dsh web workspace from phone or PC: QR-code pairing through a token-gated channel, SSE real-time sync, and separate mobile and full desktop GUI modes.
dsh-web
zhu1090093659/dsh-web-ui/tree/main/packages/dsh-ssh
SSH ops panel for DSH: web terminal, SFTP transfer with progress, local port forwarding, and one-command cluster execution across hosts; agents share the same host config.
dsh-web
zhu1090093659/dsh-web/tree/main/packages/dsh-remote-web-ui
Remote control of a dsh web workspace from phone or PC: QR-code pairing through a token-gated channel, SSE real-time sync, and separate mobile and full desktop GUI modes.