dsh-lan-gateway
A DeepSeek Harness plugin that exposes the local Web GUI through a configurable LAN/internet reverse-proxy gateway.
Install
$ dsh plugin --profile web add @riceawa/dsh-lan-gatewayPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Installs through `dsh plugin --profile web add @riceawa/dsh-lan-gateway`.
- Runs a gateway bound to `0.0.0.0` that forwards to the loopback DSH web server and rewrites headers for the `/api` trust fence.
- Allows loopback and configured LAN CIDRs to proxy without a password; can require login with an HMAC session cookie for non-LAN sources.
- Provides `lan_gateway` tools to enable or disable the gateway, inspect status, set a password, rotate the session secret, and regenerate self-signed TLS certificates.
- Supports persisted self-signed TLS certificates or custom PEM certificate and key paths.
- Adds a DSH Settings → Plugins card for live configuration of gateway, CIDR, authentication, and TLS options.
- Injects a web client shim that supplies a `crypto.randomUUID` implementation on plain-HTTP insecure origins when needed.
Useful For
- Access a DSH Web GUI from devices on a local network.
- Publish a DSH Web GUI through a separately configured network path with gateway-level login for non-LAN clients.
- Serve the gateway over HTTPS with a self-signed certificate or supplied PEM certificates.
- Use the DSH GUI over LAN plain HTTP in browsers that otherwise lack `crypto.randomUUID` on insecure origins.
Who It Fits
- DeepSeek Harness users operating the web profile.
- Users who need LAN access to a locally hosted DSH Web GUI.
- Administrators who want gateway-level access controls and TLS configuration for DSH web access.
Documented Limitations
- The gateway is disabled by default and must be enabled before it listens on a network port.
- With `authRequired` enabled, the gateway refuses to start until a password is configured.
- Configured LAN and loopback sources are password-free by design.
- Self-signed TLS certificates cause an expected browser warning on first access unless trusted.
- TLS encrypts client-to-gateway traffic; forwarding from the gateway to the local DSH loopback server remains HTTP.
- Plain-HTTP gateway origins remain insecure browser contexts; the included shim specifically addresses missing `crypto.randomUUID`.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- rice-awa/dsh-lan-gateway
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 88974ec · 2026-09-19
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 5GitHub stars
- Forks
- 1
- Open issues
- 0
- Last commit
- 2026-09-13
- Last release
- 2026-09-13
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →Local-first AI agent runtime and DSH plugin bundle providing sandboxed sessions, MCP tools, audit logs, and session replay.
View plugin →Preview, create, and edit spreadsheets, docs, slides, and canvases in DeepSeek Harness powered by Univer.
View plugin →A bilingual DeepSeek Harness cost-tracking plugin with session and daily costs, budgets, pricing management, balance lookup, and coding-plan quota displays.
View plugin →