WebUI Configuration Guide

AionUi WebUI Configuration Guide

This page applies to AionUi v2.0.0 and later. If you are on an older release, use the legacy guide.

This guide covers how to start, configure, and secure AionUi's WebUI — the browser-based interface that can run alongside the desktop app or stand on its own on a headless server / container.

Which mode am I in?

There are two distinct WebUI flavors, and they intentionally do not share state by default:

Mode	Entry point	Data directory	When to use
Desktop-bundled WebUI	The installed `AionUi` app (`AionUi --webui`, the settings toggle, or the settings page WebUI switch)	The same `userData` the desktop app uses, via a CLI-safe symlink in `$HOME` (`~/.aionui` / `~/.aionui-dev`)	You want one unified AionUi installation that you can use from the app window AND from a browser (phone on the same LAN, second monitor, etc.). All three desktop paths — pure IPC, GUI with WebUI toggled on, and `--webui` headless — share the same SQLite database, cron jobs, conversations, and admin password.
Standalone WebUI (`aionui-web`)	`bun run webui` in the repo, or the packaged `aionui-web` CLI tarball	`~/.aionui-web[-dev[-2]]` by default — never the desktop userData	You're on a headless Linux/macOS/Windows host that will not run the Electron app (server, container, Termux). No desktop install needed.

If you want the two modes to share data, point the standalone one at the desktop's directory with --data-dir — see Sharing data between modes.

Usage scenarios (click to jump)

Pick your scenario:

Cross-network access (recommended): Start → open in browser → connect via Tailscale
LAN access: Start → --remote → open IP from phone
Local-only use: Start → open http://localhost:25808
Server deployment: Start as background service → LAN/WAN access
Standalone (no Electron): bun run webui / aionui-web start

Quick command reference

Desktop-bundled WebUI (the installed AionUi app):

Platform	Local access	LAN access (`--remote`)
Windows	`AionUi.exe --webui`	`AionUi.exe --webui --remote`
macOS	`/Applications/AionUi.app/Contents/MacOS/AionUi --webui`	`/Applications/AionUi.app/Contents/MacOS/AionUi --webui --remote`
Linux (desktop user)	`AionUi --webui`	`AionUi --webui --remote`
Linux (root)	`sudo AionUi --webui --no-sandbox`	`sudo AionUi --webui --remote --no-sandbox`
Android (Termux)	`AionUi --no-sandbox --webui`	`AionUi --no-sandbox --webui --remote`

Standalone WebUI:

bun run webui                       # dev, default port
bun run webui --remote              # dev, LAN-accessible
bun run webui --port 8080           # custom port
bun run webui --data-dir /path      # custom work directory

aionui-web resetpass                # reset admin password (tarball)
bun run resetpass                   # reset admin password (in-repo dev)
AionUi --resetpass                  # reset admin password (desktop-bundled)

--no-sandbox is required when the Electron process runs as root or inside a Proot/Termux container (Android). Without it Chromium refuses to start and the process exits immediately. Desktop users and sudo-less Linux users should not add this flag.

Desktop-bundled WebUI

Local-only quick start

The simplest path — the desktop app hosts the WebUI on localhost only.

Open AionUi (installed from DMG / installer / AppImage).
Open the settings page, click WebUI.
Turn on Enable WebUI.
Click the displayed URL (e.g. http://localhost:25808) or open it in any browser on the same machine.

On first launch the app shows an initial random admin password — copy it immediately, you'll need it to log in. Once copied, the UI masks it.

LAN access

In the same WebUI settings page, also turn on Allow LAN Access.
The panel now shows two URLs:
- Local: http://localhost:25808
- Network: http://192.168.x.x:25808
Open the Network: URL from another device on the same Wi-Fi (phone, tablet, another laptop).

Command-line equivalent of the "Allow LAN Access" toggle is the --remote flag listed in the quick command reference.

Only enable LAN access on networks you trust. The login screen is bcrypt-hashed and rate-limited, but any device on your LAN can reach it.

Cross-network access

💡 Easiest path: just ask your AionUi Agent. Open a conversation, describe your situation ("I want to access AionUi at home from my phone on cellular", "I have a public-IP VPS and want to expose it through a domain", "I'm behind CGNAT", etc.), and the agent can pick a fitting solution — Tailscale, ZeroTier, Cloudflare Tunnel, FRP, ngrok, a reverse proxy on your VPS, and so on — and walk you through (or run) the install + configuration. Tailscale is a great default but it's not always the right one.

If you'd rather pick yourself, here's the manual Tailscale path (a friendly default for home → office or cellular access):

Install Tailscale on the host machine and on the device you'll connect from.
Log in with the same account on both.
Turn on Allow LAN Access in WebUI settings.
From the client, open http://100.x.y.z:25808 where 100.x.y.z is the host's Tailscale IP.

See the wiki's Remote Internet Access Tutorial for the full walkthrough (HTTPS, Cloudflare Tunnel, reverse proxies).

Starting WebUI from the command line

Sometimes the settings toggle isn't available (headless servers, scripted launchers, etc.). The --webui flag starts AionUi in headless WebUI mode — no window, just the HTTP server.

Windows:

AionUi.exe --webui
AionUi.exe --webui --remote

:: Full path when `AionUi.exe` is not on PATH
"C:\Program Files\AionUi\AionUi.exe" --webui

macOS:

/Applications/AionUi.app/Contents/MacOS/AionUi --webui
/Applications/AionUi.app/Contents/MacOS/AionUi --webui --remote

Linux (regular user):

AionUi --webui
AionUi --webui --remote

Linux (root user):

sudo AionUi --webui --no-sandbox
sudo AionUi --webui --remote --no-sandbox

--no-sandbox is needed because Chromium refuses to launch its sandbox as root. This flag is also required inside Termux/Proot Ubuntu on Android (see below).

Alternative paths on Linux:

Full install path: /usr/bin/AionUi --webui
AppImage bundle: ./AionUi-*.AppImage --webui

Android via Termux

Android uses the Electron binary inside a Proot Ubuntu container. Only WebUI mode works — the desktop window needs an X server that Android doesn't provide.

Original community tutorial by @Manamama: Running AionUi WebUI on Android · Discussion: #217

Requirements: Android 7.0+, ~5 GB free storage, Termux from F-Droid (the Play Store build is outdated).

# Step 1: install Proot Ubuntu
pkg update -y
pkg install proot-distro -y
proot-distro install ubuntu
proot-distro login ubuntu

# Step 2: system dependencies
apt update
apt install -y wget libgtk-3-0 libnss3 libasound2 libgbm1 libxshmfence1 ca-certificates

# Step 3: install AionUi
wget https://github.com/iOfficeAI/AionUi/releases/download/v1.5.2/AionUi_1.5.2_arm64.deb
apt install -y ./AionUi_*.deb
which AionUi

# Step 4: launch
AionUi --no-sandbox --webui            # local only
AionUi --no-sandbox --webui --remote   # LAN

# Step 5: open http://localhost:25808 in the device browser

One-liner from Termux's main shell (skips the explicit proot-distro login):

proot-distro login ubuntu -- bash -c "AionUi --no-sandbox --webui --remote"

Expected D-Bus / X-server warnings (safe to ignore — WebUI doesn't need them):

[WARNING] Could not connect to session bus...
[ERROR] Failed to connect to the bus...
[WARNING] Multiple instances of the app detected...

Tips:

Use a lightweight browser (Chrome / Firefox Focus).
Close background apps to free RAM.
Keep the device plugged in during long sessions.
Port already in use? Add --port 8080 (or any free port).
Permission denied? chmod +x /opt/AionUi/aionui.

Default port

The default WebUI port is 25808 in production builds, 25809 in bun start dev builds, and 25810 for AIONUI_MULTI_INSTANCE=1 dev instances. You can override with --port or $AIONUI_PORT.

Standalone WebUI (no Electron)

For users who need to serve AionUi from a machine that shouldn't (or can't) install the Electron desktop app: Linux servers, Docker, Termux, or just a development setup next to the source tree.

The standalone host is the @aionui/web-host package wrapped by the scripts/webui.ts launcher (bun run webui) or the packaged aionui-web CLI tarball.

`aionui-web` tarball (GitHub Release)

Each AionUi release publishes a self-contained archive for users who do not want the Electron desktop app:

aionui-web-<ver>-darwin-arm64.tar.gz
aionui-web-<ver>-darwin-x86_64.tar.gz
aionui-web-<ver>-linux-arm64.tar.gz
aionui-web-<ver>-linux-x86_64.tar.gz
aionui-web-<ver>-win-x86_64.tar.gz
install-web.sh

Each tarball expands into a folder with this layout:

aionui-web/
├── aionui-web              ← bun-compiled single-file binary
├── package.json            ← runtime reads `version` from here
├── bundled-aionui-backend/<plat-arch>/aionui-backend[.exe]
└── static/                 ← SPA assets

Install via install-web.sh (recommended) — handles .sha256 verification, macOS com.apple.quarantine removal, and ~/.local/bin/aionui-web symlink:

# Install the latest release
curl -fsSL https://github.com/iOfficeAI/AionUi/releases/latest/download/install-web.sh | bash

# Pin a specific version
curl -fsSL https://github.com/iOfficeAI/AionUi/releases/download/v2.0.0/install-web.sh | bash

# Custom install dir
curl -fsSL .../install-web.sh | INSTALL_DIR=/opt/aionui-web bash

# See all options
curl -fsSL .../install-web.sh -o install-web.sh
bash install-web.sh --help

After install, aionui-web is on $PATH:

aionui-web               # same as `aionui-web start`, default port 25808
aionui-web --remote      # bind 0.0.0.0 for LAN clients
aionui-web --port 8080   # custom port
aionui-web resetpass     # reset admin password (see below)
aionui-web version
aionui-web help

Manual tarball install (if install-web.sh does not fit your environment):

⚠️ macOS users: if Gatekeeper blocks launch with "aionui-web" is damaged and can't be opened, clear the extracted folder's quarantine xattr first, then launch again from a terminal.

⚠️ First launch must run from a terminal so you can see the initial admin password. The password is printed to stdout once; if you launched from Finder and missed it, run ./aionui-web/aionui-web resetpass in a terminal to print a new one.

tar -xzf aionui-web-2.0.0-darwin-arm64.tar.gz
cd aionui-web
xattr -dr com.apple.quarantine .
./aionui-web                           # prints "Generated initial admin password: …"

`bun run webui` from the repo

bun install             # first time only
bun run package         # builds out/renderer/ (required once)
bun run webui

Output:

[webui] work dir   : /Users/you/.aionui-web-dev
[webui] static dir : /.../AionUi/out/renderer
[webui] backend bin: /Users/you/.cargo/bin/aionui-backend
[webui] launching  : port=25809 allowRemote=false
...
AionUi WebUI is ready
  Local  : http://127.0.0.1:25809

Initial admin password: <12-char random>
(change it after first login)

CLI flags

Flag	Env	Default	Description
`--port <n>`	`AIONUI_PORT` / `PORT`	`25808` prod / `25809` dev / `25810` multi-instance dev	Listen port.
`--remote`	`AIONUI_ALLOW_REMOTE` / `AIONUI_REMOTE` = `1`, or `AIONUI_HOST` = `0.0.0.0`	off (localhost only)	Bind to `0.0.0.0` so LAN clients can connect.
`--data-dir <path>`	`AIONUI_DATA_DIR`	`~/.aionui-web[-dev[-2]]`	Work directory — SQLite DB, `webui.config.json`, `logs/`, chat history.
—	`AIONUI_LOG_DIR`	`<data-dir>/logs`	Override backend log directory.
—	`AIONUI_STATIC_DIR`	`<repo>/out/renderer`	Override the directory served as static assets. Useful for running a prebuilt renderer from a different location.
—	`AIONUI_BACKEND_BIN`	`resources/bundled-aionui-backend/<plat>-<arch>/aionui-backend` → `$PATH` lookup	Absolute path to the `aionui-backend` binary.
—	`NODE_ENV=production`	—	Switches the default data dir to `~/.aionui-web` (no `-dev` suffix) and the default port to `25808`.
—	`AIONUI_MULTI_INSTANCE=1`	—	Dev-only second instance. Work dir `~/.aionui-web-dev-2`, port `25810`.

Resetting the password standalone

Tarball (packaged aionui-web binary):

aionui-web resetpass                        # default ~/.aionui-web
aionui-web resetpass --data-dir /path       # explicit work dir
AIONUI_DATA_DIR=/path aionui-web resetpass  # env equivalent

In-repo dev (scripts/webui.ts launcher):

bun run resetpass                        # default ~/.aionui-web-dev
bun run resetpass --data-dir /path       # explicit work dir
AIONUI_DATA_DIR=/path bun run resetpass  # env equivalent

Either form prints a new random 12-char password and rotates the stored bcrypt hash and session secret so any active browser sessions are invalidated.

Sharing data between modes

By default, standalone and desktop-bundled WebUI don't share data:

	Desktop-bundled	Standalone
Default work dir (macOS)	`~/.aionui[-dev]` → `~/Library/Application Support/AionUi[-Dev]/aionui`	`~/.aionui-web[-dev]`
Default work dir (Linux)	`~/.aionui[-dev]` → `~/.config/AionUi[-Dev]/aionui`	`~/.aionui-web[-dev]`
Default work dir (Windows)	`%APPDATA%\AionUi[-Dev]\aionui`	`%USERPROFILE%\.aionui-web[-dev]`

To share — opt-in, one side points at the other's directory:

# Standalone reads the desktop's DB (after you've opened the desktop app once
# so the symlink is created):
bun run webui --data-dir ~/.aionui-dev

# Or the other way: make the desktop use a custom path you already have.
# (Not recommended — the desktop app's resolver expects the CLI-safe symlink
# structure on macOS to keep CLI tools off paths with spaces.)

On macOS the desktop-bundled mode creates ~/.aionui[-dev] as a symlink to avoid CLI tools choking on spaces in Application Support. If you run standalone WebUI before ever installing the desktop app, the standalone launcher deliberately uses ~/.aionui-web* (not ~/.aionui*) so it can't accidentally occupy the symlink location with a real directory and break a future desktop install. See the comment block in scripts/webui.ts for the full rationale.

Authentication

Initial credentials

On first launch each WebUI instance creates an admin user with:

Username: admin
Password: random 12-character alphanumeric, printed to the console

The password is also shown in the desktop settings page until you copy it the first time; after that it's masked.

Security features

Password hashing: bcrypt (10 salt rounds, matches the legacy webserver).
Session cookie: aionui-session, HMAC-SHA256 signed opaque token, HttpOnly, SameSite=Strict for local bind, SameSite=Lax for --remote.
Session TTL: 24 hours.
Rate limit on login: 5 attempts per 15 minutes per IP.
CSRF: session cookie is HttpOnly + SameSite; login endpoint also carries a CSRF cookie pair set by the renderer.
Password reset rotates the session secret, invalidating all existing tokens.

Single-user only (for now)

WebUI ships with one user, admin. Multi-user support is planned but not in the current release. The username argument to --resetpass is reserved for forward compatibility — today it is always admin.

Changing the password in the browser

After logging in, open the Settings → WebUI page in the browser UI. You can:

See and copy the current password (once; then masked).
Click Reset to generate a new random password.
Click Change to set a password of your choice (minimum 8 characters).

Any of these actions invalidates existing session tokens. You'll have to log back in.

Changing the password via CLI

Desktop-bundled:

:: Windows
AionUi.exe --resetpass
"C:\Program Files\AionUi\AionUi.exe" --resetpass

# macOS
/Applications/AionUi.app/Contents/MacOS/AionUi --resetpass

# Linux
AionUi --resetpass

Standalone (tarball):

aionui-web resetpass
aionui-web resetpass --data-dir /custom/work/dir

Standalone (in-repo dev):

bun run resetpass
bun run resetpass --data-dir /custom/work/dir

Either form prints the new password on stdout. Copy it immediately — it is never stored in plaintext.

Channels (Telegram / Lark / WeCom / ...)

The WebUI settings page has a Channels section that lets you connect AionUi to external chat platforms (Telegram, Lark, WeCom, DingTalk, etc.). This is independent of WebUI mode — channels work whether you're using the desktop window, the browser UI, or both.

Settings → WebUI → scroll to Channels.
Add Channel → pick the platform.
Provide the platform-specific credentials (bot token, webhook URL, app ID, etc.).
Once connected, you can chat with your AionUi agents from that platform.

Channels are optional. Skip if you only need the browser UI.

Server deployment

Run AionUi as a background service that auto-restarts and survives reboots.

Linux — systemd (recommended)

sudo nano /etc/systemd/system/aionui-webui.service

[Unit]
Description=AionUi WebUI Service
After=network.target

[Service]
Type=simple
User=YOUR_USERNAME
WorkingDirectory=/home/YOUR_USERNAME
ExecStart=/usr/bin/AionUi --webui --remote
Restart=on-failure
RestartSec=10
# Uncomment if running as root:
# ExecStart=/usr/bin/AionUi --webui --remote --no-sandbox
# User=root
# Environment="AIONUI_PORT=8080"   # custom port

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable aionui-webui.service
sudo systemctl start aionui-webui.service
sudo systemctl status aionui-webui.service

Management:

sudo journalctl -u aionui-webui.service -f      # follow logs
sudo systemctl restart aionui-webui.service      # restart
sudo systemctl stop aionui-webui.service         # stop

Get the access URL:

sudo journalctl -u aionui-webui.service | grep "WebUI"

Linux — systemd for standalone `bun run webui`

If you prefer to run the standalone host from a Git checkout on a server (e.g. inside a container):

[Service]
Type=simple
User=aionui
WorkingDirectory=/srv/AionUi
ExecStart=/usr/local/bin/bun run webui --remote --port 8080
Environment="AIONUI_DATA_DIR=/srv/aionui-data"
Environment="AIONUI_BACKEND_BIN=/usr/local/bin/aionui-backend"
Restart=on-failure
RestartSec=10

macOS — LaunchAgent

~/Library/LaunchAgents/com.aionui.webui.plist:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>Label</key>
  <string>com.aionui.webui</string>
  <key>ProgramArguments</key>
  <array>
    <string>/Applications/AionUi.app/Contents/MacOS/AionUi</string>
    <string>--webui</string>
    <string>--remote</string>
  </array>
  <key>RunAtLoad</key>
  <true/>
  <key>KeepAlive</key>
  <true/>
</dict>
</plist>

launchctl load ~/Library/LaunchAgents/com.aionui.webui.plist
launchctl start com.aionui.webui

Troubleshooting

Port already in use

The launcher does not automatically pick a free port. Use --port or $AIONUI_PORT:

AionUi --webui --port 8080
# or
bun run webui --port 8080

Can't reach the UI from the browser

Is the process actually listening?

lsof -i :25808 -iTCP -sTCP:LISTEN
netstat -an | grep 25808

Try another browser; clear cache (Ctrl/Cmd + Shift + Delete).
If you're on LAN, make sure you started with --remote or the "Allow LAN Access" toggle.
Check that your firewall isn't blocking the port (see below).

Firewall

Windows (PowerShell as admin):

New-NetFirewallRule -DisplayName "AionUi WebUI" -Direction Inbound `
  -Protocol TCP -LocalPort 25808 -Action Allow

Linux (UFW):

sudo ufw allow 25808/tcp

macOS: System Settings → Network → Firewall → Options → add the AionUi binary to the allow list.

Locating AionUi

:: Windows
where AionUi.exe

# macOS
mdfind -name AionUi.app

# Linux
which AionUi
find / -name AionUi 2>/dev/null

Viewing logs

Desktop-bundled WebUI:

macOS: ~/Library/Logs/AionUi/
Linux: ~/.config/AionUi/logs/ (or systemd journal if managed by systemd)
Windows: %APPDATA%\AionUi\logs\

Standalone:

bun run webui 2>&1 | tee /tmp/aionui-webui.log

Log directory is $AIONUI_DATA_DIR/logs (or $AIONUI_LOG_DIR if set).

`/api/system/info` reports a weird path

/api/system/info returns the backend's view of work_dir / cache_dir / log_dir. Expected values:

Mode	`work_dir`	`cache_dir`	`log_dir`
Desktop-bundled (any path)	`~/.aionui[-dev]` (symlink on macOS)	`~/.aionui-config[-dev]`	Platform logs dir
Standalone	`<--data-dir>` (default `~/.aionui-web[-dev]`)	same	`<work-dir>/logs`

If a desktop-bundled WebUI instead reports the literal ~/Library/Application Support/AionUi-Dev with spaces, CLI tools (claude, gemini, qwen) inside the backend may fail to start. This is a symlink corruption; see Corrupted CLI-safe symlink.

Corrupted CLI-safe symlink

On macOS, the desktop app creates ~/.aionui[-dev] as a symlink to ~/Library/Application Support/AionUi[-Dev]/aionui so agents don't choke on spaces in the path.

If that symlink gets replaced with a real directory (for instance, an older build of the standalone launcher that defaulted to the same location), the desktop app falls back to the space-containing path and agent spawn starts to fail. Fix:

# 1. Quit the desktop app completely.
# 2. Move aside any local data.
mv ~/.aionui-dev ~/.aionui-dev.bak-$(date +%Y%m%d)
# 3. Relaunch the desktop app — it will recreate the symlink on startup.

If you have unique data under the moved-aside directory, merge it into ~/Library/Application Support/AionUi-Dev/aionui/ before removing the backup.

ACP `initialize` handshake times out after 30 s

The backend spawns per-conversation CLI processes (claude / gemini / codex / qwen / ...) through the ACP protocol. If they can't start, the first prompt times out with a 502.

Most common cause: the CLI isn't on the process's PATH. Standalone mode now prepends every ~/.nvm/versions/node/*/bin directory to PATH before spawning the backend; if you've installed a CLI under a different Node version, make sure that version's bin/ is on PATH (the desktop app already does this).

If you see this in the backend log:

Superset: gemini not found in PATH. Install it and ensure it is on PATH, then retry.

that's the ~/.superset/bin wrapper bailing. Point PATH at the real CLI before ~/.superset/bin, or reinstall the CLI.

Command line options summary

Desktop-bundled (AionUi binary):

Option	Description
`--webui`	Start in WebUI mode (no window)
`--remote`	Bind to `0.0.0.0` so LAN clients can connect
`--port <n>` / `--webui-port <n>`	Override the listen port
`--resetpass [username]`	Reset the admin password
`--no-sandbox`	Disable Chromium sandbox (required for root Linux and Termux)

Standalone (bun run webui / aionui-web):

Option / Env	Description
`--port <n>` / `$AIONUI_PORT`	Override the listen port
`--remote` / `$AIONUI_ALLOW_REMOTE=1`	Bind to `0.0.0.0`
`$AIONUI_HOST=0.0.0.0`	Alternate way to enable LAN bind
`--data-dir <path>` / `$AIONUI_DATA_DIR`	Override the work directory
`$AIONUI_LOG_DIR`	Override the log directory
`$AIONUI_STATIC_DIR`	Override the directory served as static assets
`$AIONUI_BACKEND_BIN`	Absolute path to the backend binary
`$NODE_ENV=production`	Switch to production defaults
`$AIONUI_MULTI_INSTANCE=1`	Use a second isolated dev instance

Resetpass CLI (standalone):

Option / Env	Description
`[username]`	Positional, reserved (always `admin`)
`--data-dir <path>` / `$AIONUI_DATA_DIR`	Which work directory to reset the password in

Best practices

Development

Use bun start + the settings toggle for the normal dev loop; data stays in ~/.aionui-dev.
Use bun run webui for a second, isolated instance you can point at disposable data (--data-dir /tmp/aionui-scratch).

Production

Always run behind a firewall rule or VPN unless the LAN is fully trusted.
Put the service under systemd / LaunchAgent so it restarts automatically.
Rotate the admin password periodically (--resetpass).
Keep AionUi updated — security fixes do land in regular releases.

LAN

--remote only after you've verified the network is trusted.
Phones on iOS: pin the page URL to the home screen for a PWA-style icon.

Related resources

🚀 AionUi Wiki

Welcome to the comprehensive AionUi documentation! Find everything you need to configure, use, and master AionUi.

Uh oh!

WebUI Configuration Guide

AionUi WebUI Configuration Guide

Which mode am I in?

Usage scenarios (click to jump)

Quick command reference

Desktop-bundled WebUI

Local-only quick start

LAN access

Cross-network access

Starting WebUI from the command line

Android via Termux

Default port

Standalone WebUI (no Electron)

aionui-web tarball (GitHub Release)

bun run webui from the repo

CLI flags

Resetting the password standalone

Sharing data between modes

Authentication

Initial credentials

Security features

Single-user only (for now)

Changing the password in the browser

Changing the password via CLI

Channels (Telegram / Lark / WeCom / ...)

Server deployment

Linux — systemd (recommended)

Linux — systemd for standalone bun run webui

macOS — LaunchAgent

Troubleshooting

Port already in use

Can't reach the UI from the browser

Firewall

Locating AionUi

Viewing logs

/api/system/info reports a weird path

Corrupted CLI-safe symlink

ACP initialize handshake times out after 30 s

Command line options summary

Best practices

Development

Production

LAN

Related resources

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

`aionui-web` tarball (GitHub Release)

`bun run webui` from the repo

Linux — systemd for standalone `bun run webui`

`/api/system/info` reports a weird path

ACP `initialize` handshake times out after 30 s