dsh-remote-settings-compat

Running DeepSeek Harness for remote collaboration often means juggling trusted-origin lists, a separate password gate, and Knowledge share toggles across multiple plugins or ad-hoc scripts, which is fragile and hard to audit. dsh-remote-settings-compat unifies these into a single package and one settings card: trustedOrigins becomes the sole authority for browser-origin checks, Access Gate exposes a transparent HTTP/WebSocket proxy on port 3081 with scrypt-hashed passwords, HttpOnly SameSite session cookies, rate limiting, session expiry, and one-click revocation, while the Knowledge anonymous-share toggle only permits legitimate share-page GETs and leaves search, write-back, and admin endpoints fully gated. The plugin never modifies DSH core or hijacks Knowledge/SSH routes, so every module stays independently auditable. Upgrading from the older dsh-access-gate is seamless: the settings namespace and credential records carry over automatically, so you do not need to re-enter passwords, origins, or session policies-just remove the old bundle from the profile.

It suits teams deploying DSH on Docker hosts, NAS boxes, or remote servers who need secure browser access to settings and models from outside the local network, especially when fronting the instance with Nginx, sharing Knowledge notes with external collaborators via anonymous links, or migrating the public entry point from 3080 to the 3081 password gate. The built-in deployment self-check samples both the page path and the real /api/ path, verifying Host header port preservation, Origin passthrough, entry-point integrity, and Credentials writability before you flip the reverse proxy, reducing the risk of locking yourself out mid-transition.