Skip to content

Web UI

Version 1.13.0

  • Released October 24, 2025

Added

  • Bundled in-product documentation at /docs. To upgrade:
    1. Change the webui DOCS_URL env var from https://docs.sirius.computer to your canonical URL + /docs (eg https://crux.example.com/docs)
    2. Change the webui HELP_URL env var from https://docs.sirius.computer to /docs/
    3. Copy the location /docs block from the example ops/run/nginx.conf file into your nginx conf file
    4. Run the upgrade script (or if already run the upgrade script, run the apply-env script and then restart nginx)

Changed

  • Changed canonical OCI image name from ghcr.io/crux-comms/cruxvpn-webui to ghcr.io/siriuscomputer/cruxvpn-webui.
  • Disabled cosign build signing temporarily (until other infrastructure pieces are moved into place).

Version 1.12.0

  • Released September 29, 2025

Added

  • SKA-P integration admin-settings page.
  • SKA-P integration status on organizations page.
  • Link to SKA-P device details and quarantine status on main host page.
  • Security-groups panel on main host page.
  • Security-groups column on host endpoint panel.
  • Links to documentation from host set-up page.
  • Helper scripts for upgrading native install (in webops/upgrade directory of tarball).
  • Android APK, API, and Web UI download pages (SaaS only).

Changed

  • Changed host registrations page to list device details from SKA-P device sync instead of from audit-export log.
  • Renamed several labels from "Arqit Device UID" to simply "Device UID".
  • Included full webops directory (of helper scripts and related files), plus example environment variables file, in Docker image.

Version 1.11.0

  • Released August 17, 2025

Added

  • New Simple Client & Simple Server options for adding hosts, interfaces, and endpoints.
  • Attribution for GeoLite2 geolocation data on About page.
  • Link to Android app on Google Play from Downloads page.

Changed

  • Upgraded build to use Node.js 22.
  • Help footer link now links to docs site.
  • Improved noscript display.
  • Updated host set-up page to note prerequisites for Windows and macOS agent.

Fixed

  • Fixed missing display of pending address change on Interface panel.
  • Lighter color for success messages to better display against header bar.

Version 1.10.0

  • Released July 10, 2025

Added

  • Prompt to reload UI on version update.
  • Example Apache/Nginx configs add 5 new security-related headers to HTTP responses: 
    Content-Security-Policy: default-src 'self'; connect-src 'self' https://rdap.arin.net https://rdap.db.ripe.net https://rdap.apnic.net https://*.rdap.apnic.net https://rdap.nic.fr https://rdap.afrinic.net https://rdap.lacnic.net https://rdap.registro.br; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Content-Security-Policy: default-src 'self' https://rdap.arin.net; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Cross-Origin-Opener-Policy: same-origin
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), picture-in-picture=(), screen-wake-lock=(), serial=(), speaker-selection=(), translator=(), summarizer=(), usb=(), web-share=(), xr-spatial-tracking=()
Strict-Transport-Security: max-age=7776000
X-Content-Type-Options: nosniff
  • Downloads page for agent downloads.
  • Expose DOWNLOAD_URL env var for footer link to custom downloads page.
  • Expose TERMS_URL env var for footer link to custom TOS page.
  • EULA acceptance tracking; EULA shown to users on first log-in.
  • Seat-based license-key enforcement. License notices and warnings shown on login page. License details linked from super admin dashboard. Option to email license notices and warnings via user contact-info preference panel.
  • Show source and last-rotation date on endpoint preshared-key panel.

Changed

  • Changed links on host setup page for public agent downloads to restricted S3 signed URLs.
  • Show commands to install Windows MSI on host setup page.
  • Include command to load Docker OCI image on host setup page, and fix other commands shown to use correct image name.

Removed

  • Removed several preshared-key pages that were incongruent with keys generated via SKA-P.

Version 1.9.0

Added

  • New Host Registrations page to display Arqit QuantumCloud™ audit-export events for device registrations.
  • New Arqit Device UID field on hosts, and new Arquit OU UID field on organizations.
  • Tarball and container image builds via GitHub Actions.

Changed

  • Applied latest Crux branding.
  • Default new WireGuard interface names to crux0.
  • Updated agent set-up instructions for use of /etc/cruxvpn dir.
  • Link header logo to dashboard page.

Fixed

  • Fixed WireGuard QR code and interface file download when an IPv6 address is used for an Endpoint config setting.
  • Fixed wrapping of long host & peer names in log lists.

Version 1.8.0

  • Initial Release