dsh-public-origin
Enables loopback-dependent DeepSeek Harness plugins to work securely behind reverse proxies on public domains.
Install
$ dsh plugin --profile web add github:JJDonald/dsh-public-originPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Identifies loopback direct connections versus reverse-proxied incoming traffic
- Gates public domain requests through DSH native request rejection and session cookies
- Same-origin proxies billion-context (bili) management routes under /__bili/* with stripped loopback-sensitive headers
- Rewrites Host headers to loopback addresses for configured plugin route prefixes after authentication
- Configurable route localization via cordis.patch.yml
Useful For
- Running DeepSeek Harness Web UI on a VPS behind Nginx or another reverse proxy using a public domain
- Accessing plugins requiring loopback origin (like billion-context and skill-explorer) remotely without 403 or iframe connection errors
- Enforcing DSH session authentication on diagnostic and plugin management endpoints exposed through reverse proxies
Who It Fits
- DeepSeek Harness administrators hosting remote Web UI instances on VPS servers
- Users serving DSH through Nginx or reverse proxies with custom domain names
- Developers running billion-context or diagnostic plugins in public server environments
Documented Limitations
- Requires DeepSeek Harness >=0.2.0-rc.2 and Node.js >=22
- Reverse proxy must correctly provide forwarding headers (X-Forwarded-For or X-Real-IP, and X-Forwarded-Proto)
- Relies on internal DSH APIs (webServer.match, connection.requestRejection) which may change in future upstream releases
- Bili proxy operations idle out after 5 minutes and mutation failures do not retry automatically
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- JJDonald/dsh-public-origin
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 24cd8cc · 2026-10-12
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 0GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-12
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Compatibility bridge running unmodified Pi ecosystem extensions natively on DeepSeek Harness.
View plugin →Import and resume conversation histories from 25+ AI coding agents directly into DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Agent-native multi-market trading terminal and quantitative research plugin bundle for DeepSeek Harness.
View plugin →