How to use dsh-passwords

Login gateway for the DSH web UI: password door with first-run setup, bcrypt + at-rest encryption (AES-256-GCM/HMAC), brute-force lockout, audit log, TLS 1.2+ with 80→443 redirect, CSRF, anti-framing.

This article is auto-derived from indexed fields (wiki / faq / compatibility_json), not freshly AI-generated.

This article is derived from the plugin's already-indexed fields (wiki / faq / compatibility_json / readme), not freshly generated by AI. Source field is noted at the end of each section.

Quick start

Login gateway for the DSH web UI: password door with first-run setup, bcrypt + at-rest encryption (AES-256-GCM/HMAC), brute-force lockout, audit log, TLS 1.2+ with 80→443 redirect, CSRF, anti-framing.

— source: plugins.ai_summary

Install & verify

dsh plugin --profile web add dsh-passwords

Run the command above in your DSH Web Profile. Then enable the plugin in the plugin list.

— source: plugins.install

Key points

登录页 + 首次配置页（第一次访问先设主账号，之后谁访问都先过登录页）
登录一次管 12 小时（Cookie 会话，关浏览器也不丢）
自动 HTTPS：首次启动 dsh 时申请 Let's Encrypt 证书，之后自动续期；80 端口会跳转到 443
登录页自动跟着 dsh 的主题走（dsh 用深色它就深色）
可从远程浏览器使用 dsh 设置；若 dsh 升级后设置页异常，可在插件卡片中点“重载补丁”修复

— source: plugin_wiki.readme_en (fallback readme_raw)

Pitfalls

Review the upstream repo before installing. This guide is auto-derived from indexed fields and may lag the latest release. If anything contradicts the official docs, treat the upstream source as authoritative.

— source: general rule