Skip to content

Web UI

Version 1.17.0

  • Released March 4, 2026

Added

  • Added Connectivity Issues page for hosts and endpoints, accessible via icon on Host panel on main host page and Endpoint panel on main endpoint page. Content of page is automatically refreshed every 15 seconds. Connectivity issues are available only from agents running version 1.17.0 or newer.
  • Added Inventory Properties panel on main host page. Inventory properties are available only from agents running version 1.17.0 or newer.
  • Added option to deregister a device from the SKA-P when deleting a host.
  • Added Deregister action icon on State panel of the main device page.
  • Added Factory Reset Automatically option on Tenant panel of SKA-P Integration admin page.
  • Added Private TLS CA field on API URLs panel of SKA-P Integration admin page.

Changed

  • Changed robots.txt to disallow all.

Version 1.16.0

  • Released January 17, 2026

Added

  • Added ability to configure agent via web UI with Agent Config host page and Agent Config Defaults admin page.
  • Added ability to configure registration credentials and settings via web UI with Device Registration panel on SKA-Platform admin page.
  • Added Enforce SKA Use & Register Automatically fields to Tenants panel on SKA-Platform admin page.
  • Added Advanced Set Up host page to allow customization of setup code expiration, as well as download cruxvpn.conf files for old agents.
  • Added Factory Reset action to State panel on device details page.
  • Added Last Config Update field to Agent panel on host page.
  • Linked Type field to docs on user & host-member edit pages.

Changed

  • Simplified instructions on Set Up host page, no longer requiring download of 2 separate conf files; now only cruxvpn-setup.conf needs to be downloaded.

Version 1.15.0

  • Release December 7, 2025

Added

  • Host & endpoint state is now displayed as "Unregistered" when a host has not yet been registered (or has been deregistered) with the SKA-P (for organizations with SKA-P integration set up).
  • Rotate-now action for endpoints (requires agent version 1.15.0 to be running on both hosts in order to be effective).

Changed

  • Updated settings on SKA-P integration admin settings page to default to new SKA version 25.9 URLs and PaaS region.
  • Improved display of provisioned state on device details page.

Fixed

  • Fixed signature-credential edit form to save description changes.

Version 1.14.0

  • Released November 13, 2025

Added

  • Action icon to quarantine device on Host panel of host page (and on State panel of device registration page).
  • Action icons to add and remove the device to and from security groups on the Security Groups panel of the host page.
  • Option when deleting a host to also delete all of the connections to the host from other hosts.
  • Action icons on Change Queue panel to cancel all pending changes or mark all pending changes as applied manually.
  • Action icon to restore a deleted user.
  • Options on SKA-P integration admin-settings page for custom SKA-P quarantine and security group API URLs.

Changed

  • Grey out deregistered device UIDs in the registration list.
  • API_URL, DOC_URL, and HELP_URL environment variables may now be relative URLs.

Fixed

  • Omit PresharedKey setting in WireGuard config files & QR codes when preshared key value is unknown.
  • Fixed error displaying Changes panel of device registration page when the current user is not a super user.
  • Fixed IPv6 addresses overflowing interface & routing panel borders.
  • Fixed browser back button when going back from in-product docs to web UI.

Version 1.13.0

  • Released October 24, 2025

Added

  • Bundled in-product documentation at /docs. To upgrade:
    1. Change the webui DOCS_URL env var from https://docs.sirius.computer to your canonical URL + /docs (eg https://crux.example.com/docs)
    2. Change the webui HELP_URL env var from https://docs.sirius.computer to /docs/
    3. Copy the location /docs block from the example ops/run/nginx.conf file into your nginx conf file
    4. Run the upgrade script (or if already run the upgrade script, run the apply-env script and then restart nginx)

Changed

  • Changed canonical OCI image name from ghcr.io/crux-comms/cruxvpn-webui to ghcr.io/siriuscomputer/cruxvpn-webui.
  • Disabled cosign build signing temporarily (until other infrastructure pieces are moved into place).

Version 1.12.0

  • Released September 29, 2025

Added

  • SKA-P integration admin-settings page.
  • SKA-P integration status on organizations page.
  • Link to SKA-P device details and quarantine status on main host page.
  • Security-groups panel on main host page.
  • Security-groups column on host endpoint panel.
  • Links to documentation from host set-up page.
  • Helper scripts for upgrading native install (in webops/upgrade directory of tarball).
  • Android APK, API, and Web UI download pages (SaaS only).

Changed

  • Changed host registrations page to list device details from SKA-P device sync instead of from audit-export log.
  • Renamed several labels from "Arqit Device UID" to simply "Device UID".
  • Included full webops directory (of helper scripts and related files), plus example environment variables file, in Docker image.

Version 1.11.0

  • Released August 17, 2025

Added

  • New Simple Client & Simple Server options for adding hosts, interfaces, and endpoints.
  • Attribution for GeoLite2 geolocation data on About page.
  • Link to Android app on Google Play from Downloads page.

Changed

  • Upgraded build to use Node.js 22.
  • Help footer link now links to docs site.
  • Improved noscript display.
  • Updated host set-up page to note prerequisites for Windows and macOS agent.

Fixed

  • Fixed missing display of pending address change on Interface panel.
  • Lighter color for success messages to better display against header bar.

Version 1.10.0

  • Released July 10, 2025

Added

  • Prompt to reload UI on version update.
  • Example Apache/Nginx configs add 5 new security-related headers to HTTP responses: 
    Content-Security-Policy: default-src 'self'; connect-src 'self' https://rdap.arin.net https://rdap.db.ripe.net https://rdap.apnic.net https://*.rdap.apnic.net https://rdap.nic.fr https://rdap.afrinic.net https://rdap.lacnic.net https://rdap.registro.br; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Content-Security-Policy: default-src 'self' https://rdap.arin.net; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Cross-Origin-Opener-Policy: same-origin
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), picture-in-picture=(), screen-wake-lock=(), serial=(), speaker-selection=(), translator=(), summarizer=(), usb=(), web-share=(), xr-spatial-tracking=()
Strict-Transport-Security: max-age=7776000
X-Content-Type-Options: nosniff
  • Downloads page for agent downloads.
  • Expose DOWNLOAD_URL env var for footer link to custom downloads page.
  • Expose TERMS_URL env var for footer link to custom TOS page.
  • EULA acceptance tracking; EULA shown to users on first log-in.
  • Seat-based license-key enforcement. License notices and warnings shown on login page. License details linked from super admin dashboard. Option to email license notices and warnings via user contact-info preference panel.
  • Show source and last-rotation date on endpoint preshared-key panel.

Changed

  • Changed links on host setup page for public agent downloads to restricted S3 signed URLs.
  • Show commands to install Windows MSI on host setup page.
  • Include command to load Docker OCI image on host setup page, and fix other commands shown to use correct image name.

Removed

  • Removed several preshared-key pages that were incongruent with keys generated via SKA-P.

Version 1.9.0

Added

  • New Host Registrations page to display Arqit SKA-Platform™ audit-export events for device registrations.
  • New Arqit Device UID field on hosts, and new Arquit OU UID field on organizations.
  • Tarball and container image builds via GitHub Actions.

Changed

  • Applied latest Crux branding.
  • Default new WireGuard interface names to crux0.
  • Updated agent set-up instructions for use of /etc/cruxvpn dir.
  • Link header logo to dashboard page.

Fixed

  • Fixed WireGuard QR code and interface file download when an IPv6 address is used for an Endpoint config setting.
  • Fixed wrapping of long host & peer names in log lists.

Version 1.8.0

  • Initial Release