Skip to content

Web UI

Version 1.11.0

  • Released August 17, 2025

Added

  • New Simple Client & Simple Server options for adding hosts, interfaces, and endpoints.
  • Attribution for GeoLite2 geolocation data on About page.
  • Link to Android app on Google Play from Downloads page.

Changed

  • Upgraded build to use Node.js 22.
  • Help footer link now links to docs site.
  • Improved noscript display.
  • Updated host set-up page to note prerequisites for Windows and macOS agent.

Fixed

  • Fixed missing display of pending address change on Interface panel.
  • Lighter color for success messages to better display against header bar.

Version 1.10.0

  • Released July 10, 2025

Added

  • Prompt to reload UI on version update.
  • Example Apache/Nginx configs add 5 new security-related headers to HTTP responses: 
    Content-Security-Policy: default-src 'self'; connect-src 'self' https://rdap.arin.net https://rdap.db.ripe.net https://rdap.apnic.net https://*.rdap.apnic.net https://rdap.nic.fr https://rdap.afrinic.net https://rdap.lacnic.net https://rdap.registro.br; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Content-Security-Policy: default-src 'self' https://rdap.arin.net; img-src 'self' data:; script-src-elem 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'self'
Cross-Origin-Opener-Policy: same-origin
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), picture-in-picture=(), screen-wake-lock=(), serial=(), speaker-selection=(), translator=(), summarizer=(), usb=(), web-share=(), xr-spatial-tracking=()
Strict-Transport-Security: max-age=7776000
X-Content-Type-Options: nosniff
  • Downloads page for agent downloads.
  • Expose DOWNLOAD_URL env var for footer link to custom downloads page.
  • Expose TERMS_URL env var for footer link to custom TOS page.
  • EULA acceptance tracking; EULA shown to users on first log-in.
  • Seat-based license-key enforcement. License notices and warnings shown on login page. License details linked from super admin dashboard. Option to email license notices and warnings via user contact-info preference panel.
  • Show source and last-rotation date on endpoint preshared-key panel.

Changed

  • Changed links on host setup page for public agent downloads to restricted S3 signed URLs.
  • Show commands to install Windows MSI on host setup page.
  • Include command to load Docker OCI image on host setup page, and fix other commands shown to use correct image name.

Removed

  • Removed several preshared-key pages that were incongruent with keys generated via SKA-P.

Version 1.9.0

Added

  • New Host Registrations page to display Arqit QuantumCloud™ audit-export events for device registrations.
  • New Arqit Device UID field on hosts, and new Arquit OU UID field on organizations.
  • Tarball and container image builds via GitHub Actions.

Changed

  • Applied latest Crux branding.
  • Default new WireGuard interface names to crux0.
  • Updated agent set-up instructions for use of /etc/cruxvpn dir.
  • Link header logo to dashboard page.

Fixed

  • Fixed WireGuard QR code and interface file download when an IPv6 address is used for an Endpoint config setting.
  • Fixed wrapping of long host & peer names in log lists.

Version 1.8.0

  • Initial Release