飞牛 NAS 上跑公网可访问的 DeepSeek Harness

events {
    worker_connections 1024;
}

http {
    map $http_upgrade $connection_upgrade {
        default upgrade;
        ''      close;
    }

    server {
        listen 80;
        server_name _;

        location / {
            proxy_pass http://deepseek-harness:3080;
            proxy_http_version 1.1;

            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;

            proxy_read_timeout 3600s;
            proxy_send_timeout 3600s;
        }
    }
}

services:
  deepseek-harness:
    image: alliot/deepseek-harness:0.1.0-rc.6.2
    restart: unless-stopped
    user: root
    expose:
      - "3080"
    environment:
      DSH_TRUSTED_HOSTS: dsharp.hn.takin.cc
      DSH_ALLOW_REMOTE_CONFIGURATION: "1"
      DSH_TELEMETRY_DISABLED: "1"
    volumes:
      - ./data:/home/node/.dsh
      - ./work:/work
      - type: bind
        source: ./workspace
        target: /workspace
    read_only: true
    tmpfs:
      - /tmp:rw,nosuid,nodev,size=1g
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    stop_grace_period: 10s
    networks:
      - dsh-network

  nginx-proxy:
    image: nginx:alpine
    container_name: dsh-nginx-proxy
    restart: unless-stopped
    ports:
      - "3080:80"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
    depends_on:
      - deepseek-harness
    networks:
      - dsh-network

networks:
  dsh-network:
    driver: bridge

https://dsharp.hn.takin.cc

你能做什么