dsh-server-login

DeepSeek Harness (DSH) was originally designed as a powerful single-user local tool, but scaling it for public internet hosting often exposes gaps in authentication, tenant isolation, and secure remote access.
dsh-server-login bridges this exact divide by introducing a robust server-side login and multi-tenant orchestration layer. With this plugin, multiple users can safely share a single public server while maintaining strict environmental boundaries. Administrators review and approve registrations, after which each user receives a dedicated workspace complete with an isolated file desktop, folder-specific DSH instances, and a private API key vault. Every interaction is wrapped in encrypted channels and rigorous permission fences, effectively eliminating the cross-contamination and security risks inherent in traditional multi-user setups.

At its core, the plugin delivers a production-ready hosting experience tailored for flexibility and resilience. It supports both soft isolation and OS-level hard isolation (via account sandboxing and iptables port guarding), backed by dual-layer path validation to prevent directory traversal and symlink attacks. Sub-instances that crash are automatically rescued and restarted by a built-in guardian process. Deployment adapts to your infrastructure scale: Mode A offers a lightweight, single-server setup perfect for small teams or personal use, leveraging SQLite and systemd; Mode B provides a fully containerized Kubernetes architecture featuring namespace isolation, pod network policies, leader election, and PostgreSQL for enterprise-grade high availability. Flexible routing options including URL subpaths, wildcard subdomains, or custom nginx configurations ensure seamless access across devices, from mobile browsers to desktop workstations.

This plugin is ideal for developers, engineering teams, and service providers who want to productize or internally share DSH capabilities without reinventing the wheel. If you need to provision secure, isolated AI development environments for teammates, clients, or community contributors, and prefer not to build complex auth and resource-scheduling systems from scratch, dsh-server-login serves as your foundational orchestration layer. It transforms a standalone experimental tool into a resilient, multi-tenant service pipeline ready for real-world public exposure.