dsh-auth

The DeepSeek Harness web interface typically listens only on localhost and lacks built-in administrator authentication. The dsh-auth plugin solves this security gap by adding a secure admin login layer, ensuring only authorized users can access the interface and APIs. Its core capability lies in integrating Caddy as an authentication edge, automatically protecting pages, APIs, downloads, SSE, and WebSocket requests while keeping the Harness service itself secure. The plugin supports both interactive and non-interactive setup, offering features like password or token initialization, automatic TLS certificate management, password reset, and external identity provider integration. It is suitable for quickly enabling secure access in development environments as well as meeting production deployment demands for stability and security. System administrators and developers can easily grant enterprise-grade access control to DeepSeek Harness without deep security expertise, using straightforward commands.