deepseekplugins

DeepSeek Harness plugin

dsh-remote-access-blueligh

DSH web plugin for LAN and Tailscale remote access through Caddy with API access policies.

Tools & Capabilities
Jump to install

Source facts

Repository
bluelightgit/dsh-remote-access
Latest update
Aug 20, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-21

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/bluelightgit/dsh-remote-access
Plugin: dsh-remote-access-blueligh
Author: bluelightgit

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-remote-access

DSH Web 插件，为本地 DSH 提供局域网访问、Tailscale Serve 和 Funnel 入口。

设计

局域网客户端 ── HTTPS:3081 ──► Caddy ──┬─ /api/* ─► API Gateway:3083 ─► DSH:3080
                                      └─ 其他请求 ───────────────► DSH:3080

Tailscale ── Serve/Funnel ──► Caddy:3082 ──┬─ /api/* ─► API Gateway:3083
                                          └─ 其他请求 ─► DSH:3080

DSH 原始服务只监听 127.0.0.1:3080。Caddy 负责 HTTPS、入口识别和 Basic Auth；API Gateway 根据访问来源限制浏览器调用的 DSH API。配置、证书和运行状态保存在 DSH 数据目录。

访问模式

模式入口认证API 策略
本机127.0.0.1:3080DSH 自身完整权限
LANhttps://<LAN_IP>:3081可选 Basic Authlan
Tailscale ServeTailscale 域名可选 Basic Authserve
Tailscale Funnel公网 Tailscale 域名强制 Basic Authfunnel，仅基础 API

LAN、Serve、Funnel 各自使用 API 白名单，默认只开放会话、消息、模型列表、技能列表等基础功能。设置、凭据、主机文件和模型探测等接口默认关闭。

设置页可以按访问模式勾选 API、配置 Basic Auth，并为 LAN / Serve 开启“允许全部 API”或“可信远程设置”。两项高权限能力不适用于 Funnel；插件自身的服务控制接口只接受本机页面请求。

安装

dsh plugin --profile web add @greenonion/dsh-remote-access

手动安装：

git clone <repo-url> dsh-remote-access
cd dsh-remote-access
node install.js

安装后重启 DSH，在“设置 → 远程访问”中操作 Caddy、Tailscale 和 API 策略。 启动反代时会在运行时目录自动生成本地 CA 和服务端证书。

运行环境

  • Node.js >=20
  • Caddy 2.8+
  • OpenSSL（生成本地 CA 和服务端证书）
  • Tailscale（使用 Serve / Funnel 时需要）

核心功能支持 Linux、macOS 和 Windows；证书安装提示使用 mDNS 检测，在 Linux 和 macOS 上启用。默认端口为 LAN 3081、Tailscale 3082、API Gateway 3083，可在 cordis.patch.yml 中调整。

运行时目录默认为 ~/.dsh/dsh-remote-access/，可用 DSH_HOME 更改，主要包含动态生成的 Caddyfile、证书、认证信息和运行日志。

安全边界

  • 远程请求先经过 Caddy 和 API Gateway，未知 API 默认拒绝；本机 loopback 保留 DSH 完整权限。
  • LAN / Serve 不强制 Basic Auth；Funnel 始终要求 Basic Auth，并保持基础 API 策略。
  • Caddy 使用插件独立的配置和 PID；关闭时只停止插件创建或确认属于插件的 Caddy/Tailscale 资源。
  • Basic Auth 只保存 bcrypt hash；/ca.crt 用于设备安装本地 CA，保持免认证访问。

License

MIT

Back to searchOpen GitHub repository

More related plugins

View category