dsh-remote-gateway

DeepSeek Harness binds to 127.0.0.1 by default, which means your AI workspace is locked behind the machine it runs on. dsh-remote-gateway lifts that restriction by spinning up a local reverse-proxy gateway that forwards requests into DSH, so you can chat with your AI from a phone, a second laptop, or a remote office network — anytime, anywhere.

Security is the core design principle. The plugin ships with password authentication (sliding expiry, 7-day absolute cap), an IP allowlist (IPv4, IPv6, and CIDR), a strict host allowlist to prevent DNS rebinding, and optional HTTPS via PEM certificates. Every setting takes effect the moment you hit save — no restart required. It also installs a compatibility layer before the client connects, so native models, plugin panels, and the settings page all work correctly over the remote link instead of falling back to in-browser memory.

Rather than exposing your instance to the public internet, the plugin is designed to pair with private-network tools like Tailscale, ZeroTier, Cloudflare Tunnel, or a corporate VPN. If you want secure, controllable remote access to DSH within your own network, this is the plugin for you.