Bernardxu123/dsh-mobile-gate
30Last commit Aug 14, 2026
dsh-mobile-gate DSH plugin
dsh-mobile-gate acts as a reverse proxy gateway for DeepSeek Harness (DSH), allowing phones and tablets on the same LAN to securely access the DSH Web UI. It adds a first-access approval system, device token binding, and automatic injection of compact mobile CSS for a better phone experience.
How to install the dsh-mobile-gate DSH plugin
dsh plugin --profile web add ./dsh-mobile-gateCopying does not run this command. Review the repository and version before installing the dsh-mobile-gate DSH plugin.
dsh-mobile-gate DSH plugin data source
dsh-mobile-gate DSH plugin snapshot date: Aug 16, 2026
discovered
What the dsh-mobile-gate DSH plugin can do
- Proxies DSH Web UI to LAN devices with approval workflow
- Injects mobile-optimized compact layout CSS into HTML responses
- Supports first-access approval via admin page (approve/deny/revoke)
- Binds approved devices with one-time tokens and cookies
- Rate-limits per IP (default 120 requests/min) to prevent abuse
- Runs as independent subprocess, zero impact on DSH main service
Where the dsh-mobile-gate DSH plugin fits
- Access DSH chat interface from a phone or tablet on the same Wi-Fi
- Securely share DSH with family or colleagues in a local network
- Allow temporary guest access with manual approval
- Use mobile-friendly layout for frequent on-the-go interactions
- Manage approved devices centrally via admin panel at /lan-gate/admin
Who the dsh-mobile-gate DSH plugin is for
- DSH users who want to access the Web UI from mobile devices
- Users who need controlled access to DSH from other devices on the LAN
dsh-mobile-gate DSH plugin limitations
- Only works within the same LAN; no support for remote/WAN access
- Gateway uses plain HTTP; not secure over untrusted networks
- Requires manual firewall configuration on Windows (first run)
- Approval UI is only available on the host machine (127.0.0.1)
dsh-mobile-gate DSH plugin: from the repository README
Quoted from the Bernardxu123/dsh-mobile-gate README, the upstream source of the dsh-mobile-gate DSH plugin. Copyright remains with the original authors.
> 让局域网内的手机、平板等设备**安全访问**本机 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH) Web UI，并自动注入**手机端紧凑排版**。 > > English: [README.en.md](README.en.md) · LLM 索引: [llms.txt](llms.txt) · Agent 指南: [AGENTS.md](AGENTS.md)     **关键词 / Keywords**: `dsh-plugin` · `deepseek-harness-plugin` · 局域网 · LAN · 手机访问 · mobile · 反向代理 · reverse-proxy · 远程访问 · remote-access · 审批 · approval · 网关 · gateway --- ## 📑 目录 - [✨ 特性](#-特性) - [🏗️ 工作原理](#️-工作原理) - [🚀 快速开始](#-快速开始) - [⚙️ 配置](#️-配置) - [🧑💻 管理 API](#-管理-api) - [🧱 手机端布局优化](#-手机端布局优化已内置) - [❓ 常见问题](#-常见问题) - [⚠️ 安全须知](#️-安全须知) - [📦 项目结构](#-项目结构) - [🙏 致谢](#-致谢) --- ## ✨ 特性 | 特性 | 说明 | | --- | --- | | 📱 **手机端适配** | 代理 HTML 时自动注入 `data-lan-device` 标记 + 紧凑排版 CSS + `crypto.randomUUID` polyfill（HTTP 非安全上下文必需），输入区权限/模型选择器压缩为小胶囊按钮，不再重叠 | | 🔒 **首次访问审批** | 手机第一次访问显示「等待本机批准」，需在电脑上手动允许，杜绝未授权设备访问 | | 🎟️ **设备令牌 + Cookie 绑定** | 批准后生成一次性令牌，一次批准只绑定一个浏览器，令牌无法被其他设备复用 |
Read the full READMERepository license: MIT
dsh-mobile-gate DSH plugin questions
How do I install dsh-mobile-gate?
Run `dsh plugin --profile web add ./dsh-mobile-gate` in the cloned repository directory. Alternatively, you can statically mount it by editing `cordis.patch.yml` as described in the README.
My phone says 'connection refused' when accessing the gateway URL.
Make sure your phone and computer are on the same Wi-Fi network. On Windows, you might need to allow Node.js through the firewall. Run the PowerShell command `New-NetFirewallRule -DisplayName 'DSH Mobile Gate 3088' -Direction Inbound -LocalPort 3088 -Protocol TCP -Action Allow -Profile Any` to add the rule.
How do I approve a device?
Open the admin page at http://127.0.0.1:3088/lan-gate/admin on your computer. You'll see a list of pending devices. Click the 'Approve' button and choose the access type (phone, desktop, or auto). Then refresh the phone page to get the token.
Can I use this plugin over the internet?
No, it is designed only for trusted local networks. The gateway uses plain HTTP without authentication, so it should not be exposed to the internet. For remote access, consider using a VPN or other secure tunnels.
How do I uninstall the plugin?
If you installed via `dsh plugin add`, delete the entry from `cordis.patch.yml` and restart DSH. If you used dynamic plugin, simply stop or undefine it; the gateway process will terminate automatically.