vocsong/deepseek-harness-portal

README excerpt

DeepSeek Harness Portal A multi-tenant platform that provisions and routes isolated DeepSeek Harness (dsh) instances — one container per user — behind a single Cloudflare Tunnel. The portal is the only authentication entry point. It owns registration, login, roles, and per-instance access control. Authentication model - Registration : email + one-time code (OTP), with optional username + password set during signup (so a new user can log in with credentials right away). An invite code is enforced when the admin has set one. - After registering : Profile can change name, username, password, and email. Email replacement requires separate codes from both the current and proposed mailboxes and revokes all other sessions. - Login : username/password or "email me a code" (OTP fallback). - Admin controls (Settings tab): email-domain whitelist, invite code, toggle OTP registration, toggle password login. OTP delivery uses SMTP (nodemailer), which is required in production. Code logging is available only with the explicit localhost-only development combination NODE ENV=development , DOMAIN=localhost , and OTP DEV MODE=true ; OTP values are never returned by the API. Architecture Component Lo…

Category