Tip
Termix is free and always will be. If it's useful to you, consider donating to support development.
Enterprise audit logging with SIEM export, OIDC group-to-RBAC mapping, Tailscale SSH check mode, multi-disk metrics, and bug fixes across sync, jump hosts, RDP/VNC, and auth.
| Architecture | Windows | Linux | Mac | Android | iOS |
|---|---|---|---|---|---|
| x86-64 (64-bit) | EXE · MSI · Portable | AppImage · DEB · Portable | DMG | — | — |
| AArch64 (ARM64) | — | AppImage · DEB · Portable | DMG | APK (1.4.0) | IPA (1.4.0) |
| ARMv7 (32-bit) | — | AppImage · DEB · Portable | — | — | — |
| x86-32 (32-bit) | EXE · MSI · Portable | — | — | — | — |
| Universal | Chocolatey | Flatpak | DMG · App Store · Homebrew | — | — |
Update Log:
- Added support for multi disk usage in file manager/host metrics
- Added better Ctrl + F terminal search
- Added right click menu on app rail to pin sidebar faster
- Support for overriding shared SSH credential
- Added mapping for OIDC provider groups to RBAC roles
- Added host export dialog for more customizable host exporting
- Initial groundwork for supporting more database types (postgres and mysql)
- Added audit log export (CSV/NDJSON) and optional live forwarding to a SIEM
- Added configurable audit log retention by age and row count
- Audit entries for file manager, RDP/VNC/Telnet, Docker and tunnel sessions
- Encrypted SSO secrets instead of BASE64 encoding them
- Added support for Tailscale SSH check mode with in-terminal browser authentication
- Added ENABLE_TELEMETRY variable to disable the usage ping before startup
Bug Fixes:
- Hardened nginx headers/asset caching
- Deleting an account no longer deletes its audit entries and session recordings
- Made logger display expanded error messages
- Removed phantom port knocking
- Fixed Proxmox guest discovery failures over jump host
- Compare sync cursors independently of timestamp layout
- Fixed sync deleting not reaching other side
- Remote sync stalling after first pass and never propagating deletions
- DB_FILE_ENCRYPTION variable loading DB file as empty
- Removed unneeded field encryption boundaries
- SSH login alerts being dropped silently
- Honor lookupOptions.all in custom DNS lookup hook
- Jump host SOCKS proxy settings being ignored
- Jump host tunnels not reachable by guacd
- Per-host RDP/VNC recording flags being ignored
- RDP sessions not using the configured resolution
- OIDC login failing with unverifiable ID tokens or JWKs without alg
- Refuse to start with an empty database when data exists elsewhere
- Database not persisting during container shutdown
- Host command history setting not saving
- Desktop preference sync and remote sync account identity
- Desktop guacd calls not routed to the connected remote server
- File manager navigation getting stuck after permission errors
- Read-only shared hosts could be dragged into folders
- Terminal highlighting breaking inside split control strings
- Windows terminal Tab key and Android hardware keyboard keys
- tmux monitor failing on Tailscale-authenticated hosts
- Database export not staying same-origin on localhost
- Snippet execution results not reported correctly
- Shared hosts appearing twice
- Wake-on-LAN broadcast address being dropped
- Sharing an empty folder was rejected
- Remote sync losing references between linked records
- Desktop app failing to find its backend on some architectures
- Centralized outbound address validation for homepage proxy requests
- Default font size to medium instead of large
- Tailscale hosts hanging on connect when the tailnet ACL requires a periodic check