Skip to content

Web UI

Version 1.15.0

  • Release December 7, 2025

Added

  • Host & endpoint state is now displayed as "Unregistered" when a host has not yet been registered (or has been deregistered) with the SKA-P (for organizations with SKA-P integration set up).
  • Rotate-now action for endpoints (requires agent version 1.15.0 to be running on both hosts in order to be effective).

Changed

  • Updated settings on SKA-P integration admin settings page to default to new SKA version 25.9 URLs and PaaS region.
  • Improved display of provisioned state on device details page.

Fixed

  • Fixed signature-credential edit form to save description changes.

Version 1.14.0

  • Released November 13, 2025

Added

  • Action icon to quarantine device on Host panel of host page (and on State panel of device registration page).
  • Action icons to add and remove the device to and from security groups on the Security Groups panel of the host page.
  • Option when deleting a host to also delete all of the connections to the host from other hosts.
  • Action icons on Change Queue panel to cancel all pending changes or mark all pending changes as applied manually.
  • Action icon to restore a deleted user.
  • Options on SKA-P integration admin-settings page for custom SKA-P quarantine and security group API URLs.

Changed

  • Grey out deregistered device UIDs in the registration list.
  • API_URL, DOC_URL, and HELP_URL environment variables may now be relative URLs.

Fixed

  • Omit PresharedKey setting in WireGuard config files & QR codes when preshared key value is unknown.
  • Fixed error displaying Changes panel of device registration page when the current user is not a super user.
  • Fixed IPv6 addresses overflowing interface & routing panel borders.
  • Fixed browser back button when going back from in-product docs to web UI.

Version 1.13.0

  • Released October 24, 2025

Added

  • Bundled in-product documentation at /docs. To upgrade:
    1. Change the webui DOCS_URL env var from https://docs.sirius.computer to your canonical URL + /docs (eg https://crux.example.com/docs)
    2. Change the webui HELP_URL env var from https://docs.sirius.computer to /docs/
    3. Copy the location /docs block from the example ops/run/nginx.conf file into your nginx conf file
    4. Run the upgrade script (or if already run the upgrade script, run the apply-env script and then restart nginx)

Changed

  • Changed canonical OCI image name from ghcr.io/crux-comms/cruxvpn-webui to ghcr.io/siriuscomputer/cruxvpn-webui.
  • Disabled cosign build signing temporarily (until other infrastructure pieces are moved into place).

Version 1.12.0

  • Released September 29, 2025

Added

  • SKA-P integration admin-settings page.
  • SKA-P integration status on organizations page.
  • Link to SKA-P device details and quarantine status on main host page.
  • Security-groups panel on main host page.
  • Security-groups column on host endpoint panel.
  • Links to documentation from host set-up page.
  • Helper scripts for upgrading native install (in webops/upgrade directory of tarball).
  • Android APK, API, and Web UI download pages (SaaS only).

Changed

  • Changed host registrations page to list device details from SKA-P device sync instead of from audit-export log.
  • Renamed several labels from "Arqit Device UID" to simply "Device UID".
  • Included full webops directory (of helper scripts and related files), plus example environment variables file, in Docker image.

Version 1.11.0

  • Released August 17, 2025

Added

  • New Simple Client & Simple Server options for adding hosts, interfaces, and endpoints.
  • Attribution for GeoLite2 geolocation data on About page.
  • Link to Android app on Google Play from Downloads page.

Changed

  • Upgraded build to use Node.js 22.
  • Help footer link now links to docs site.
  • Improved noscript display.
  • Updated host set-up page to note prerequisites for Windows and macOS agent.

Fixed

  • Fixed missing display of pending address change on Interface panel.
  • Lighter color for success messages to better display against header bar.

Version 1.10.0

  • Released July 10, 2025

Added

  • Prompt to reload UI on version update.
  • Example Apache/Nginx configs add 5 new security-related headers to HTTP responses: 
    Content-Security-Policy: default-src 'self'; connect-src 'self' https://rdap.arin.net https://rdap.db.ripe.net https://rdap.apnic.net https://*.rdap.apnic.net https://rdap.nic.fr https://rdap.afrinic.net https://rdap.lacnic.net https://rdap.registro.br; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Content-Security-Policy: default-src 'self' https://rdap.arin.net; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Cross-Origin-Opener-Policy: same-origin
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), picture-in-picture=(), screen-wake-lock=(), serial=(), speaker-selection=(), translator=(), summarizer=(), usb=(), web-share=(), xr-spatial-tracking=()
Strict-Transport-Security: max-age=7776000
X-Content-Type-Options: nosniff
  • Downloads page for agent downloads.
  • Expose DOWNLOAD_URL env var for footer link to custom downloads page.
  • Expose TERMS_URL env var for footer link to custom TOS page.
  • EULA acceptance tracking; EULA shown to users on first log-in.
  • Seat-based license-key enforcement. License notices and warnings shown on login page. License details linked from super admin dashboard. Option to email license notices and warnings via user contact-info preference panel.
  • Show source and last-rotation date on endpoint preshared-key panel.

Changed

  • Changed links on host setup page for public agent downloads to restricted S3 signed URLs.
  • Show commands to install Windows MSI on host setup page.
  • Include command to load Docker OCI image on host setup page, and fix other commands shown to use correct image name.

Removed

  • Removed several preshared-key pages that were incongruent with keys generated via SKA-P.

Version 1.9.0

Added

  • New Host Registrations page to display Arqit QuantumCloud™ audit-export events for device registrations.
  • New Arqit Device UID field on hosts, and new Arquit OU UID field on organizations.
  • Tarball and container image builds via GitHub Actions.

Changed

  • Applied latest Crux branding.
  • Default new WireGuard interface names to crux0.
  • Updated agent set-up instructions for use of /etc/cruxvpn dir.
  • Link header logo to dashboard page.

Fixed

  • Fixed WireGuard QR code and interface file download when an IPv6 address is used for an Endpoint config setting.
  • Fixed wrapping of long host & peer names in log lists.

Version 1.8.0

  • Initial Release