Andy Dixon 400d11ea4f ci: least-privilege release publishing, no persisted tokens, pinned audit, checksums
- Release Builds: the build/test matrix ran ~1,400 third-party build
  scripts and tests with a contents:write token persisted in .git/config.
  It now runs with contents:read and persist-credentials: false; a
  separate publish job (no project or dependency code) downloads the
  artefacts, writes SHA256SUMS and attaches both to the release. The
  release now waits for every platform instead of publishing partially.
- CI/Fuzz checkouts don't persist credentials; cargo-audit is pinned
  (0.22.2), fails on yanked crates, and also audits fuzz/Cargo.lock;
  fuzz runs set -timeout=10 so slow-input bugs (like the IRC OSC one)
  are reported instead of hiding under libFuzzer's 20-minute default.
- updates/index.php: array-valued query parameters no longer raise
  TypeErrors/warnings; nosniff header.
2026-10-13 06:57:07 +01:00

Nexus Terminal

A native desktop client for SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local terminals — with secure credential handling and a focused, multi-session workflow.

Nexus Terminal helps you manage many connections at once, keep terminal work organised, and move files with confidence. It is a single Rust application with no webview, so it starts quickly and stays responsive under heavy terminal output.

Highlights

  • SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local terminal sessions in one app
  • Tabbed sessions with split panes, pinning and drag-to-reorder
  • SFTP browser with drag-and-drop uploads and a permission-aware directory picker
  • SSH jump hosts, SOCKS5/HTTP proxies, local and remote port forwards, agent forwarding and TOTP auto-fill
  • Serial consoles with full line settings (baud, data bits, parity, stop bits, flow control)
  • Native VNC and RDP viewers; RDP with NLA, certificate pinning, and SOCKS5/HTTP proxy or SSH tunnel routes
  • Disconnected overlay with one-click reconnect, and auto-reconnect with backoff
  • Broadcast input, snippets, trigger rules and terminal search
  • Session recording (asciicast v2) and playback
  • Secure credential storage with the OS keychain first and an encrypted vault fallback

Quick start

  1. Launch Nexus Terminal.
  2. Click + at the bottom of the sidebar (or press Cmd+N / Ctrl+N) and create a connection profile.
  3. Click Create & Connect to save it and open a session in a new tab. Afterwards, click the profile in the sidebar to connect.

Prefer a one-off session? Use Cmd+Shift+Q / Ctrl+Shift+Q to quick connect, or click Local Machine in the sidebar for a local shell.

If a session drops, use the Reconnect button in the disconnected overlay.

Documentation

Keyboard shortcuts

All shortcuts use Cmd on macOS and Ctrl on Windows/Linux.

macOS Shortcut Windows/Linux Shortcut Action
Cmd + K Ctrl + K Open command palette
Cmd + N Ctrl + N New connection
Cmd + W Ctrl + W Close current tab
Cmd + Tab Ctrl + Tab Next tab
Cmd + Shift + Tab Ctrl + Shift + Tab Previous tab
Cmd + 1–9 Ctrl + 1–9 Switch to tab by number
Cmd + , Ctrl + , Open settings
Cmd + F Ctrl + F Find in terminal
Cmd + Shift + D Ctrl + Shift + D Split pane right (side by side)
Cmd + Shift + E Ctrl + Shift + E Split pane down (top and bottom)
Cmd + Shift + R Ctrl + Shift + R Toggle session recording
Cmd + Shift + B Ctrl + Shift + B Toggle broadcast input mode
Cmd + Shift + S Ctrl + Shift + S Open snippet library
Cmd + Shift + Q Ctrl + Shift + Q Quick connect
F11 F11 Toggle fullscreen

Building from source

Nexus Terminal is a Rust workspace in rust/. With rustup installed:

cd rust
cargo run --release

See docs/build-and-release.md for platform prerequisites, tests and release packaging.

S
Description
Open-source native desktop client for SSH, SFTP, Telnet, Serial, VNC, RDP, IRC and GitHub, written in Rust. AGPL-3.0.
https://dixon.cx/nexus Readme AGPL-3.0
32 MiB
v3.0.2
Latest
2026-10-13 14:16:27 +02:00
Languages
Rust 97.6%
Shell 1.5%
PHP 0.9%