dsh-local-hanaccount
DeepSeek Harness Web 配置的访问锁（密码、通行密钥、IP 列表、Nginx）
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-local-hanaccount@2.3.11Local Hanaccount 以 dsh-local-hanaccount 发布，当前版本为 2.3.11。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Single-operator access gate for exposing DSH on the public internet: password, Passkey, IP whitelist/blacklist, block statistics, and optional Nginx integration.
webServer prefix by defaultexcludePrefixes skips login only (IP rules still apply)fetch auto-injects Bearerauthorized_keys + challenge/verify (ed25519)X-Real-IPAuthorization: Basic is presentWorkspaces and sessions are native DSH — this plugin does not manage them.
dsh plugin --profile web add dsh-local-hanaccount
# or from local checkout:
dsh plugin --profile web add /path/to/dsh-local-hanaccount
Restart DSH Web profile after install.
127.0.0.1, use the Nginx snippet from settings~/.dsh/storages/dsh-local-hanaccount/
| File | Purpose |
|---|---|
config.json | password hash, allow/deny lists, toggles |
state.json | sessions, lockouts |
authorized_keys | SSH public keys |
passkeys.json | Registered WebAuthn credentials |
security-visitors.json | block stats + suspicious IPs |
| Method | When |
|---|---|
| Password | Always (first-time setup + fallback) |
| Passkey | HTTPS or http://127.0.0.1 / localhost — register in Settings after first login |
| SSH key | Settings → advanced; for CLI/scripts (manual sign flow) |
Passkey availability is detected from the current URL (isSecureContext), not from whether you have a domain.
For headless/CLI use, add an ssh-ed25519 public key under Settings → SSH 密钥.
MIT