AI Agent Hub
Back to plugins
🖥️

dsh-remote-access

Client Updated 2026.08.26

Run the following command in DeepSeek Harness:

dsh plugin install bluelightgit/dsh-remote-access

Paste the following prompt into your AI chat to install this plugin:

Run dsh plugin install bluelightgit/dsh-remote-access in DeepSeek Harness to install the plugin, then restart DSH and configure remote access in the settings page. Source: https://github.com/bluelightgit/dsh-remote-access

About this plugin

DSH ships listening on 127.0.0.1 only, so your local AI assistant is locked behind one machine. dsh-remote-access layers Caddy plus an API gateway in front of DSH without touching DSH source code, turning LAN access, Tailscale private remote, and an optional Cloudflare Tunnel public entry into a single managed settings page.

Every access path carries its own auth layer, API whitelist, and optional CIDR restriction, and each Caddy port can be toggled independently with hot-reload. The security model is deliberately thick: page action tokens are gone, admin APIs demand exact loopback Host plus Origin, the gateway strips all client-supplied identity headers before forwarding, anonymous Tunnel mode is hard-capped to a read-only API set, and on Windows the runtime directory and credentials are locked down with explicit DACLs.

This is for DSH users who want to reach the same instance from a second machine on the LAN, from a road trip over Tailscale Serve, or just peek at the model list from an external browser via an anonymous Tunnel read-only entry. Runs on Linux, macOS, and Windows; TLS auto-detects OpenSSL or falls back to Caddy internal CA.

Use Cases

  • Access a local DSH instance from another machine on the LAN
  • Connect securely to DSH on the road via Tailscale Serve
  • Peek at model lists and sessions from an external browser in read-only mode

Best For

  • Individual users who want to share one DSH instance across multiple devices
  • Developers who prefer self-hosting over routing AI requests through public cloud services
  • DSH users on Linux, macOS, or Windows who need fine-grained authentication policies