wearequantico/qarx-portal repository overview

⁠qARX Portal

Web interface for qARX — a self-hosted, zero-knowledge, end-to-end encrypted Secret Manager. Your Digital Fortress.

React + TypeScript single-page application served by nginx. All cryptography runs here, in your browser: vault keys are derived client-side (Argon2id), secrets are encrypted and decrypted locally, and only ciphertext ever reaches the API. The Portal is also where remote sessions (SSH/RDP/VNC) are launched through qARX.Bridge + qARX.Executor.

⁠Quick start

The Portal is not deployed standalone — it is part of the qARX stack. Generate the full compose.yml from the Core image:

docker run --rm wearequantico/qarx-core:latest qarx-cli compose > compose.yml

Full installation & deployment guide: https://quanticoarx.com⁠

⁠Configuration

Put a TLS-terminating reverse proxy (Traefik / Caddy / nginx) in front of it — the Portal must be served over HTTPS: the Web Crypto APIs it relies on require a secure context.

⁠Tags

• :X.Y.Z — specific release (recommended; pin by digest in production)
• :latest — most recent release

Core, Portal and Drop are released in lockstep — always deploy the same tag for all three. A Portal newer or older than its Core is not supported.

⁠Architecture

• wearequantico/qarx-core — backend API
• wearequantico/qarx-portal — web UI (this image)
• wearequantico/qarx-drop — zero-knowledge one-time secret sharing for external recipients
• plus PostgreSQL 18+ and Redis 8+

⁠Security

Zero-knowledge architecture: encryption and decryption happen in this client. The server stores only ciphertext and never has access to your secrets.

Report vulnerabilities to [email protected]⁠.

⁠License

Proprietary © Quantico S.r.l. See https://quanticoarx.com⁠ Support: [email protected]⁠