The Web profile of DeepSeek Harness (DSH) allows only local loopback access by default. On a trusted home network, when a mobile browser accesses it directly via the LAN IP, API calls may fail due to a non-secure context and full operational permissions cannot be obtained. The dsh-lan-access plugin overrides configuration through the Bundle Patch layer to resolve both issues.

Core Features

  1. Bypass host binding restrictions: Override webserver.host to 0.0.0.0 so the server listens on all network interfaces.
  2. Fix secure-context errors: Inject a randomUUID shim for compatibility with non-secure contexts that do not support this API.
  3. Automatically allow trusted hosts: Automatically add the LAN IPv4 address to the /api trust list.

Installation and Activation

Before installing, ensure the pnpm environment is installed. This plugin must be installed into the web profile.

# 1) Install the plugin
dsh plugin --profile web add github:ZnFr60/dsh-lan-access#main

# 2) Restart the web service to activate the plugin
dsh web --no-open

Usage

After installing and restarting, you can verify the configuration and access it with the following steps.

Verify the configuration

dsh --profile web --dump-config

After running it, you should see that webserver.host is 0.0.0.0, and a lan-access line appears in the configuration.

Access addresses
- Local access: http://127.0.0.1:3080
- LAN access: http://<LAN_IPv4>:3080

Notes

  • The plugin only listens on 0.0.0.0; do not configure port forwarding or public network binding.
  • The /api trust fence will still reject untrusted Hosts (DNS rebinding protection remains effective).
  • It is recommended to use a firewall to allow only the local network segment.
  • It must be installed into the web profile; otherwise, you will be notified that the webserver line cannot be found.