dsh-lan-gate
Run the following command in DeepSeek Harness:
dsh plugin install maxesisnclaw/dsh-lan-gate
Paste the following prompt into your AI chat to install this plugin:
Run dsh plugin install maxesisnclaw/dsh-lan-gate in your terminal, or obtain the source from https://github.com/maxesisnclaw/dsh-lan-gate and install the plugin.
About this plugin
DeepSeek Harness refuses to bind its web server to all interfaces by default, making it nearly impossible to open the admin panel from another device on your local network. dsh-lan-gate exists to solve exactly that: it unlocks host binding through the official composition layer while locking the door with a password gate and a CIDR allowlist, so you get convenient LAN access without exposing the service.
Non-loopback connections must authenticate before the UI or any /api route becomes reachable. The default CIDR list covers 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Requests carrying X-Forwarded-*, Forwarded, or Via headers are rejected outright to prevent proxy-based spoofing. Passwords are stored as scrypt verifiers, session tokens keep only their SHA-256 in memory, and the loopback address bypasses authentication as a recovery path.
If your team or home network needs a second device to reach the DeepSeek Harness admin dashboard and you do not want to stand up a TLS terminator or expose the service to the public internet, dsh-lan-gate is a lightweight, pragmatic choice. It does not encrypt the transport, so on plain HTTP a LAN observer can still sniff credentials. Keep it off the public internet and behind no reverse proxy that injects forwarding headers.
Use Cases
- Access the DeepSeek Harness admin panel from other devices on an office LAN
- Open the local web console from a home laptop for debugging
- Block reverse proxies from spoofing forwarding headers to bypass access control
Best For
- Developers who need multi-device LAN access to Harness Web
- Self-hosting operators who want basic access gating without a full TLS terminator
- Local deployment users who prefer lightweight, MIT-licensed plugins
Related Plugins
A security red-team prompt plugin for DeepSeek-V4 that uses code-formal mapping and zero-trigger system prompts to enable unconditional output, intended for authorized testing and research only.
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.
Packages all 87 SKILL.md files from upstream reverse-skill as a DeepSeek Harness plugin that auto-registers them for authorized reverse engineering, penetration testing, and security research.