When developing or debugging with DeepSeek Harness (DSH), accessing the Web GUI through a reverse proxy often runs into limitations. For example, the settings panel may fail to open, WebSocket connections may be interrupted, or mobile access may fail because authentication credentials are missing. To address these issues, community developer xchannel1987 provided the dsh-reverse-proxy-xc plugin.

The following section describes the plugin’s features, installation, and usage.

What is It?

This is a LAN reverse proxy plugin designed for DSH version 0.1.7 and later. It runs a standalone service that listens on the 0.0.0.0:3090 port, forwards requests from LAN devices to the main DSH service, and automatically handles the necessary header rewriting and credential injection, so phones, tablets, and other devices can get exactly the same experience as local 127.0.0.1:3080.

Core Features

  • Full feature access: The sidebar, session list, settings panel, and credentials management all work properly; WebSocket supports real-time event delivery.
  • Compatibility fixes: Automatically injects environment flags to pass frontend environment checks; automatically injects a randomUUID polyfill; automatically handles authentication credentials for mobile access.
  • Request handling: A standalone service listens on 0.0.0.0:3090; requests are forwarded to the main DSH service; headers are rewritten to the loopback address; necessary scripts are injected into the HTML.
  • Security and control: LAN-only; configuration is adjustable, supporting parameters such as port and authentication.

Installation and Enablement

Installing the plugin requires the DSH CLI. After installation, restart the DSH service.

dsh plugin --profile web add dsh-reverse-proxy-xc

After successful installation, go to the “LAN Reverse Proxy” section on the DSH settings page and turn on the “Enable Proxy” switch to start the service.

Typical Usage

  1. Make sure the target device (such as a phone or tablet) is on the same LAN as the DSH host, or is connected through a VPN.
  2. Open the proxy address in the target device’s browser:
    http://<主机内网IP>:3090
  1. Example:
    http://10.100.50.125:3090

Applicable Scenarios and Notes

  • Environment requirements: DSH version must be >= 0.1.7. Only suitable for intranet or VPN environments.
  • Network security: Do not expose the service to the public internet. If sensitive operations are involved, ensure network security.