JUANWANG-BUAA/dsh-full-remote

README excerpt

dsh-full-remote Listed in awesome-dsh-plugin · DeepSeek Harness plugin English 中文 dsh-full-remote is a plugin for DeepSeek Harness. It places an authenticated reverse proxy in front of the Harness Web server, so the Web UI can be used through a public tunnel or from a device on the local network while privileged APIs such as settings, credentials, and directory browsing remain available. Problem DeepSeek Harness binds its Web server to a loopback address and only accepts privileged requests when the Host and Origin headers refer to a loopback address. When the UI is reached through a generic tunnel, these headers carry the public hostname and the trust check fails. The page loads, but the following methods return 403: - settings. - credentials. - host.listDirectory Approach Result Generic tunnel (SSH port forward, Caddy, binding 0.0.0.0 ) Page loads; settings. / credentials. / host.listDirectory return 403 LAN-only plugin without authentication Usable on the local network; not suitable for public exposure Password prompt without header rewriting Requests are authenticated, but the privileged APIs remain blocked Solution The plugin inserts a reverse proxy between the tunnel and the …

Category