fix

Dockerfile

@@ -2,7 +2,9 @@ FROM node:22-bookworm
 
 ENV NODE_ENV=production \
     HOME=/root \
-    DSH_WORKSPACE=/data/research
+    DSH_WORKSPACE=/data/research \
+    DSH_PORT=7861 \
+    HF_PORT=7860
 
 RUN mkdir -p /data/research /app \
     && npm install -g @deepseek-ai/dsh@latest \
@@ -13,32 +15,27 @@ RUN mkdir -p /data/research /app \
 WORKDIR /app
 
 RUN cat > /app/proxy.js <<'EOF'
-const http = require('http');
-const httpProxy = require('http-proxy');
+const http = require("http");
+const httpProxy = require("http-proxy");
 
 const proxy = httpProxy.createProxyServer({
-    target: 'http://127.0.0.1:7861',
-    changeOrigin: true,
+    target: "http://127.0.0.1:7861",
+    changeOrigin: false,
     ws: true,
-    xfwd: false,
-    secure: false
+    xfwd: false
 });
 
-proxy.on('proxyReq', (proxyReq) => {
-    proxyReq.setHeader('Host', '127.0.0.1:7861');
-    proxyReq.setHeader('Origin', 'http://127.0.0.1:7861');
-    proxyReq.removeHeader('Referer');
-});
-
-proxy.on('error', (err, req, res) => {
-    console.error('Proxy error:', err.message);
+proxy.on("error", (err, req, res) => {
+    console.error("Proxy error:", err.message);
 
     if (res && !res.headersSent) {
-        res.writeHead(502, { 'Content-Type': 'text/plain' });
+        res.writeHead(502, {
+            "Content-Type": "text/plain"
+        });
     }
 
     if (res && !res.writableEnded) {
-        res.end('DSH backend unavailable');
+        res.end("DSH backend unavailable");
     }
 });
 
@@ -46,31 +43,49 @@ const server = http.createServer((req, res) => {
     proxy.web(req, res);
 });
 
-server.on('upgrade', (req, socket, head) => {
+server.on("upgrade", (req, socket, head) => {
     proxy.ws(req, socket, head);
 });
 
-server.listen(7860, '0.0.0.0', () => {
-    console.log('Public proxy listening on 0.0.0.0:7860');
+server.listen(7860, "0.0.0.0", () => {
+    console.log("Proxy listening on 0.0.0.0:7860");
 });
 EOF
 
 RUN cat > /app/start.sh <<'EOF'
 #!/bin/sh
-set -e
+set -eu
 
 mkdir -p /data/research
 
+TRUSTED_HOST_ARGS=""
+
+if [ -n "${SPACE_HOST:-}" ]; then
+    TRUSTED_HOST_ARGS="--trusted-host ${SPACE_HOST}"
+fi
+
 echo "Starting DeepSeek Harness..."
-dsh web --no-open --port 7861 &
+echo "Trusted host: ${SPACE_HOST:-not-set}"
+
+dsh web \
+    --no-open \
+    --port 7861 \
+    $TRUSTED_HOST_ARGS &
 
 DSH_PID=$!
 
 echo "Waiting for DSH..."
 for i in $(seq 1 60); do
     if curl -fsS "http://127.0.0.1:7861/" >/dev/null 2>&1; then
+        echo "DSH is ready."
         break
     fi
+
+    if ! kill -0 "$DSH_PID" 2>/dev/null; then
+        echo "DSH exited unexpectedly."
+        exit 1
+    fi
+
     sleep 1
 done
 
@@ -79,9 +94,9 @@ node /app/proxy.js &
 
 PROXY_PID=$!
 
-trap 'kill $DSH_PID $PROXY_PID 2>/dev/null || true' TERM INT EXIT
+trap 'kill "$DSH_PID" "$PROXY_PID" 2>/dev/null || true' TERM INT EXIT
 
-wait $DSH_PID
+wait "$DSH_PID"
 EOF
 
 RUN chmod +x /app/start.sh \
@@ -89,8 +104,8 @@ RUN chmod +x /app/start.sh \
     && apt-get install -y --no-install-recommends curl \
     && rm -rf /var/lib/apt/lists/*
 
-EXPOSE 7860
-
 WORKDIR /data/research
 
+EXPOSE 7860
+
 CMD ["/app/start.sh"]