dsh-Webroad

DSH Web binds to 127.0.0.1 by design, so reaching it from a phone or any remote network means manually editing configs, standing up tunnels, and wrestling with trust fences. dsh-Webroad folds all of that into a single Mobile Access panel inside the DSH settings page: a QR code, a PIN, and a toggle — scan and go, no CLI involved.

The plugin covers the full mobile-and-remote access pipeline. In LAN mode the proxy auto-listens on 0.0.0.0:3081; a phone on the same Wi-Fi scans the local QR, enters an 8-digit PIN, and is in. In public mode a single click spins up a cloudflared quick tunnel — no account, no domain required — with a fresh PIN on every activation and instant revocation of the prior link. Sessions stay alive through full WebSocket passthrough plus a protocol-level heartbeat that defeats NAT timeouts and mobile power-saving silent drops, with automatic reconnection on failure. Large JSON payloads are compressed via gzip or brotli automatically, shrinking a 17 MB long conversation to roughly 1 MB. Security is layered: independent LAN and public PINs, per-IP login rate limiting, HttpOnly cookies tied to the dsh web process, and a header-rewrite proxy that keeps DSH trust fences seeing only loopback — zero configuration changes to DSH itself. Phone-specific patches include a browse directory picker, crypto.randomUUID and AbortSignal.any polyfills, and a first-visit straight-to-current-session redirect for a near-native feel.

It is built for the everyday scenario of checking DSH sessions from bed on a phone, or hopping on over 4G at a coffee shop. Power users can also plug in an existing Cloudflare named tunnel for a stable domain, or follow the retained Tailscale Funnel walkthrough for a manual route. Either way, the plugin is install-and-forgotten: restart dsh web, open the settings panel, scan the code, and the phone is connected.