dsh-https-fix

dsh ships its Web GUI bound to 127.0.0.1 with no official extension API, so accessing the agent settings page from another machine is essentially out of the question. dsh-https-fix solves all of that in a single plugin install: it stands up a built-in TLS reverse proxy, registers trusted domains at runtime against trustedHosts, and hot-patches the dsh client-connection layer to lift the loopback restriction — no nginx, no extra startup flags required.

On the certificate front, a self-signed cert for a public IP is generated automatically when no domain is available; if you do have one, simply point the plugin at your Let's Encrypt or internal CA cert and key. Security defaults to a username-and-password login gate (passwords stored as SHA-256, sessions last seven days), and the plain-HTTP external route can be switched off with one click. After installation, run the 12-point health check and confirm every item goes green.

This plugin is aimed at self-hosters who want their dsh agent reachable over a LAN or the internet without maintaining a separate reverse-proxy stack. One critical caveat: the patch is applied to dsh source files at runtime, so the plugin version must exactly match the installed dsh release. Always disable the plugin or switch to the corresponding branch before upgrading dsh, or the application will fail to start.