DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Lan Proxy — DSH Plugin for DeepSeek Harness
← Plugins

@wingsky-1/dsh-lan-proxy

Lan Proxy

Access the dsh web UI over a local network: listen on 0.0.0.0:<port> and forward HTTP/HTTPS and WebSocket/wss traffic to the loopback web server (127.0.0.1:3080 by default). Rewrite Host/Origin to pass the browser trust boundary for /api, accepting only IP literals or localhost in the Host header (D

The plugin will be installed here. Keep web if you are unsure.

npx -y @deepseek-ai/dsh plugin --profile web add @wingsky-1/dsh-lan-proxy@0.1.6
READMECompatibilityVersions

Description

Access the dsh web UI over a local network: listen on 0.0.0.0:<port> and forward HTTP/HTTPS and WebSocket/wss traffic to the loopback web server (127.0.0.1:3080 by default). Rewrite Host/Origin to pass the browser trust boundary for /api, accepting only IP literals or localhost in the Host header (DNS rebinding protection). HTTPS is enabled alongside HTTP by default (3443); certificates can be configured or automatically generated as self-signed.

Compatibility and provenance

Lan Proxy is published as @wingsky-1/dsh-lan-proxy and currently resolves to version 0.1.6. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.

DSH compatibility
*
Runtime surfaces
web
Release source
npm
Registry updated
9/20/2026

Versions

0.1.6stable
8/18/2026
0.1.5stable
8/18/2026
0.1.4stable
8/18/2026
Show 2 more versionsCollapse versions
0.1.3stable
8/17/2026
0.1.1stable
8/16/2026

Related plugins

Loading related plugins…

Latest
0.1.6
DSH
*
HMR
Process restart
Tree shaking
Safe tree shaking not declared
Unpacked size
107 kB
Files
16
Surface
web
License
MIT
Source
npm
GitHub
★ 19
Weekly downloads
478
Security scan
✓ v0.1.6 scan passed
Last push
9/20/2026
View source ↗
README badge

Click the badge to copy Markdown for your README.

Do you maintain this Plugin?Claim benefit · Priority security scan

Verify the GitHub repository declared in package.json to manage this listing. After you claim it, Hub will prioritize a security scan of the current version and publish the result when it passes.

Claim this Plugin →
Report an issue
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in

Related plugins

More verified plugins in security-access.

Doctor@linxin666/dsh-doctorTransactional rescue mode for DSH profiles with a supervised launcher, isolated recovery capsule, deterministic repairs, health monitoring, and a local Web recovery consolePocketdsh-pocketPut DeepSeek Harness in your pocket: one package, one settings page, and scan a QR code on your phone to access DSH on your computer in sync (LAN + public network, real-time screen mirroring).DSCODE@toddzheng024/dscode-bundleA complete DeepSeek coding agent with persistent shell, Ultra collaboration and automatic permission review.Auto Reviewdsh-auto-reviewSecond-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent decides allow/deny on the approval answerer chain, with fail-closed fallback and full session-log audit.

README

@wingsky-1/dsh-lan-proxy

局域网访问 dsh web UI：在 0.0.0.0:<port> 监听，把 HTTP/HTTPS 与 WebSocket/wss 转发到回环 web 服务器（默认 127.0.0.1:3080）。

  • 重写 Host/Origin 以通过 /api 浏览器信任围栏
  • 仅接受 IP 字面量或 localhost 的 Host 头（DNS 重绑定防护）
  • HTTPS 默认并存（3443），证书可配置或自动生成自签名

安装

dsh plugin --profile web add @wingsky-1/dsh-lan-proxy

安装后重启一次 dsh web。插件注入 webServer，仅在回环服务器绑定后启动， 并自动解析真实上游端口。

⚠️ 安装即开端口：本插件会在 0.0.0.0:3081（HTTP）与 0.0.0.0:3443 （HTTPS）监听，局域网内所有设备都可访问你的 dsh web。不需要时请 dsh plugin --profile web remove @wingsky-1/dsh-lan-proxy。

🔧 内网设备的完整 settings 读写（信任开关）：默认内网设备经 lan-proxy 访问时，部分设置接口被宿主 dsh-client-connection 的 loopback 围栏拦截（只读）。 若要内网设备获得完整读写权限，需对宿主打一次显式信任开关（幂等；dsh 升级 重装后需重跑）。先克隆本仓库，然后：

node scripts/patch-connection.ts                          # 自动探测宿主路径
node scripts/patch-connection.ts --bundle <绝对路径>      # 或显式指定 client.js

不执行则内网设备保持只读访问（更安全的缺省）。安全权衡见「安全模型」节。

配置

键默认说明
host0.0.0.0监听地址
port3081HTTP 监听端口
httpsPort3443HTTPS 监听端口
targetHost127.0.0.1回环上游主机（仅允许回环地址）
targetPort自动上游端口（默认取 web 服务器实际绑定端口）
httpsEnabledtrue是否并存 HTTPS
tlsCertFile / tlsKeyFile无自定义证书（mkcert 等）

GUI 设置入口：设置 → 插件 → 「局域网访问」卡片（保存即热更新）。

HTTPS 支持

  • 证书来源（两级）：① 配置 tlsCertFile/tlsKeyFile（正式证书或 mkcert 本地 CA，浏览器零警告）；② 自动生成自签名证书（系统 openssl 生成并缓存到 <DSH_HOME>/lan-proxy/，私钥权限 0600）
  • 自签名证书首次访问需手动"继续访问"；内网设备零警告推荐 mkcert

安全模型

  • 出站目标白名单（L1）：targetHost 仅允许回环地址（localhost / 127.0.0.1 / ::1），配置层与运行时入口双重校验——防止开放转发/SSRF
  • DNS 重绑定防护：只接受 Host 为 IP 字面量或 localhost 的请求，域名一律 403/断开；IP 字面量在任何端口都安全
  • 凭据面：dsh settings RPC 仅回环可读写；通过本插件访问的远程设备在 浏览器信任围栏内可读写服务器 settings（含凭据类数据）——确保你的局域网 可信，或禁用该插件
  • 私钥权限：自动生成的自签名私钥落盘 0600
  • 开放端口提醒：0.0.0.0 监听对局域网所有设备可见

验证

# 健康检查（回环）
curl -s http://127.0.0.1:3081/api/lan-proxy/health

# 局域网访问（在另一台设备上）
curl http://<本机局域网IP>:3081/api/dsh-gzip/health

已知限制

  • HTTPS 需要系统 openssl（不可用且未配置证书文件时，HTTPS 通道自动降级关闭）
  • 换网段导致 IP 变化时，自签名证书需重新生成或更新 config.json

License

MIT