lament-z/dsh-bridge-gateway
A remote-access plugin for DeepSeek Harness that adds a public direct-connect gateway and a Tailscale tunnel, so phones and out-of-network devices can connect straight to your machine or reach it over a stable Tailscale HTTPS hostname. The direct gateway listens on 0.0.0.0:<port> with its own self-signed HTTPS certificate and a forced login gate (no third party in the middle), and the Tailscale channel is read-only — it never changes your Tailscale config. It is an enhanced fork of wenbin-wb/dsh-bridge that fixes conflicts with native DSH capabilities.
dsh-bridge-gateway is a multi-channel remote-access plugin for DeepSeek Harness built on top of wenbin-wb/dsh-bridge. It adds two things and fixes two classes of problems: a public direct-connect gateway, where the computer listens on 0.0.0.0:<port> with its own self-signed HTTPS certificate and a forced login gate so outside devices connect with no third party in the middle (fits deployments with a public IP or port-forwarding); and a Tailscale tunnel that publishes the local WebUI as https://<host>.<tailnet>.ts.net, reusing the tailnet you already have with automatic address detection. It also fixes conflicts with native DSH capabilities that remain present in upstream. LAN QR direct-connect, Cloudflare/self-built tunnels, WeChat/QQ/Feishu/Telegram bots and full-protocol access authentication all come from upstream and keep working.
Install
dsh plugin --profile web add github:lament-z/dsh-bridge-gatewayCopied verbatim from the README's install block (the preferred GitHub form, no npm involved); an npm form dsh plugin --profile web add dsh-bridge-gateway is also shown.
Compatibility
The plugin is fully inert until you enable the features you want; LAN access, Cloudflare and custom tunnels, and the IM bots all keep working exactly as before. The added Tailscale channel is read-only — the plugin runs tailscale status / tailscale serve status queries to fill in the Serve address but never changes your Tailscale config, offering a copyable tailscale serve command when Serve is not configured, and TLS is issued automatically by Tailscale.
Details
- Repo: lament-z/dsh-bridge-gateway
- Category: Infrastructure & Deployment
- Stars: 2
- Version: GitHub repo lament-z/dsh-bridge-gateway (2★), installed as a github: spec to the repo itself; an enhanced fork of wenbin-wb/dsh-bridge (MIT) that keeps tracking upstream fixes.
Alternatives
1m01m0/deepseek-harness-desktop · AIcivilization/dsh-vps-manager · AlliotTech/deepseek-harness-docker