How to run Deepseek Harness on non-localhost

First of all, to be honest, probably like many people out there, I did not read the entire 88-page paper on the Cordis kernel or the 'spatiotemporal composability' thing. I just wanted to try out the new DeepSeek Harness which is currently being very hyped.

Unfortunately, due to it being in the very early stage of development it does not allow binding to host other than localhost or 127.0.0.1. But, luckily, socat comes to rescue.

Here is my simple run script to forward the currently listening DeepSeek Harness to port 8443 on my T470's Tailscale interface.

```
#!/bin/sh
if ! ss -l | grep 3080 >/dev/null; then
        echo is deepseek harness running? port 3080 seems dead
fi

if ! [ -f ./server.pem ]; then
        echo "Generating self-signed certificate to ./server.pem"
        openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes -subj "/CN=localhost"
fi

socat OPENSSL-LISTEN:8443,bind=100.64.128.37,cert=server.pem,verify=0,reuseaddr,fork TCP4:127.0.0.1:3080
```

You might ask, why not just forward port 3080 to other interface? You [can't](https://github.com/deepseek-ai/deepseek-harness/discussions/942).

P.S. you may need to add --trusted-host option to `dsh`.