dsh-gateway
A self-contained HTTPS remote-access gateway for the DeepSeek Harness web surface.
Install
$ dsh plugin --profile web add dsh-gatewayPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Installs into a DSH web profile with `dsh plugin --profile web add dsh-gateway`.
- Terminates HTTPS with SNI multi-certificate support and persistent self-signed certificate generation when certificates are not supplied.
- Provides HMAC-signed cookie sessions, configurable users and session duration, login failure rate limiting, and logout cookie clearing.
- Reverse-proxies DSH web traffic including SSE and WebSocket upgrades.
- Restricts responses to configured hosts, returning HTTP 421 for other hosts.
- Supports hot-applied gateway settings and a DSH settings-page Remote Gateway control panel.
- Includes an optional Windows .NET tray launcher for managing DSH instances.
Useful For
- Expose a locally hosted DSH web service over HTTPS for remote access.
- Replace a separate Caddy HTTPS and cookie-login layer with a DSH-installed gateway.
- Serve multiple configured hostnames or IP addresses through one HTTPS listener.
- Protect a loopback-bound DSH web service behind gateway authentication.
Who It Fits
- DeepSeek Harness web-profile operators
- Users migrating from a Caddy-based DSH remote-access setup
- Windows users who want an optional tray-based DSH instance controller
Documented Limitations
- Requires Node.js 22 or later.
- The documented default account is `admin / change-me` and must be changed before deployment.
- Gateway user passwords are stored in plaintext in `settings.yaml` according to the documentation.
- Self-signed certificates require manual browser trust on first access.
- The optional tray launcher is Windows-specific and requires .NET SDK 10+ to build.
- Complex configuration such as users, certificates, and multiple sites is configured through `settings.yaml`.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- clarknu/dsh-gateway
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 84bc39a · 2026-09-19
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 6GitHub stars
- Forks
- 2
- Open issues
- 1
- Last commit
- 2026-09-10
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Local-first AI agent runtime and DSH plugin bundle providing sandboxed sessions, MCP tools, audit logs, and session replay.
View plugin →Import and resume chat histories from 18+ AI coding agents into DeepSeek Harness with reverse export and sync.
View plugin →Preview, create, and edit spreadsheets, docs, slides, and canvases in DeepSeek Harness powered by Univer.
View plugin →Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →