dsh-remote-tailscale

Many people install DSH only to realize that its web UI is local-only — leave the same Wi-Fi and you are locked out, while exposing the port to the public internet feels uneasy. dsh-remote-tailscale exists to close that gap: through a Tailscale tailnet, any device signed in to the same Tailscale account can open the full DSH web UI, WebSocket included, with no shared LAN and no second password to manage.

Security is the first design principle. The plugin publishes exclusively via tailscale serve on its own HTTPS port (default 8455, 443 is refused) behind a loopback proxy on 127.0.0.1. It never runs tailscale funnel and never touches the public internet. Publishing is off by default and toggled with a single switch in Settings; if Tailscale drops the connection the plugin reports the failure instantly, clears the URL and QR code, and republishes with 5/15/30/60-second backoff when the link returns.

This plugin is for anyone already running DSH and Tailscale who wants to reach the local web UI from a phone, tablet, or another computer regardless of network. Whether you are checking model conversations on the commute or switching to a different machine for work, signing into the same Tailscale account and opening the .ts.net address or scanning the QR code is all it takes — secure, straightforward, and with zero public exposure.