Configuration

All keys are optional. Defaults are applied in code (home-layer patch config replaces the whole object, it does not deep-merge).

Key	Default	Meaning
`keyEnv`	`DSH_SIMPLE_AUTH_KEY`	Environment variable that holds the access key
`keyFile`	`""`	If set, read the key from this file (trimmed). Takes precedence over `keyEnv`
`cookieName`	`dsh_simple_auth`	Session cookie name
`sessionTtl`	`604800`	Cookie lifetime in seconds (7 days)
`cookieSecure`	`auto`	`auto` follows `X-Forwarded-Proto`; `true` / `false` force the `Secure` flag
`rewriteLoopback`	`true`	Present authenticated traffic as `127.0.0.1:
` so dsh’s reverse-proxy Host fence does not 403 privileged APIs
`title`	`DeepSeek Harness`	Login heading
`hint`	(built-in zh/en copy)	Login subtitle
`remember`	`true`	Show “remember key on this device” (localStorage only; the server still uses the cookie)
`rpcMinTimeoutMs`	`120000`	Floor for `AbortSignal.timeout` injected into the web index. dsh’s unary RPC default is 30s; large `session.history` pages over a tunnel abort with `The user aborted a request`. `0` disables the inject

Never put the key itself in YAML or git.

dsh-simple-auth