diff --git a/image/Dockerfile b/image/Dockerfile
index e79db7f6b..bfcc8d652 100644
--- a/image/Dockerfile
+++ b/image/Dockerfile
@@ -6,7 +6,7 @@ COPY . .
 
 RUN make server cli
 
-FROM node:16.20.2 as ui-builder
+FROM node:18 as ui-builder
 
 COPY ui ui
 
diff --git a/ui/Makefile b/ui/Makefile
index e785ee854..2d030401f 100644
--- a/ui/Makefile
+++ b/ui/Makefile
@@ -7,7 +7,7 @@ all: deps lint-check test build
 
 .PHONY: deps
 deps: package.json
-	yarn install --frozen-lockfile
+	NODE_OPTIONS=--openssl-legacy-provider yarn install --frozen-lockfile
 
 SOURCES := $(shell ls *.json) tailwind.config.js yarn.lock
 SOURCES += $(shell find public)
@@ -20,7 +20,7 @@ SOURCES += $(shell find src -name '*.css' -print)
 .PHONY: build
 build: deps $(SOURCES)
 	@echo "+ $@"
-	yarn build
+	NODE_OPTIONS=--openssl-legacy-provider yarn build
 
 # checks that files respect linting / formatting rules (primary used in CI)
 .PHONY: lint-check
@@ -32,7 +32,7 @@ lint-check: deps $(SOURCES)
 .PHONY: test
 test: deps $(SOURCES)
 	@echo "+ $@"
-	yarn test --watchAll=false
+	NODE_OPTIONS=--openssl-legacy-provider yarn test --watchAll=false
 
 #################
 ## Development ##
@@ -42,26 +42,26 @@ test: deps $(SOURCES)
 .PHONY: start
 start-dev-server: deps
 	@echo "+ $@"
-	yarn start
+	NODE_OPTIONS=--openssl-legacy-provider yarn start
 
 # generates sources (e.g. API client). Right now it does depend on some resources generated by the
 # root Makefile (e.g. Swagger definitions)
 .PHONY: gen-src
 gen-src:
 	@echo "+ $@"
-	yarn gen:src
+	NODE_OPTIONS=--openssl-legacy-provider yarn gen:src
 
 # attempts to lint / format files where it's possible to do automatically (it'll change the files)
 .PHONY: lint
 lint: deps $(SOURCES)
 	@echo "+ $@"
-	yarn lint
+	NODE_OPTIONS=--openssl-legacy-provider yarn lint
 
 # runs unit tests in an interactive watch mode
 .PHONY: test-watch
 test-watch: deps $(SOURCES)
 	@echo "+ $@"
-	yarn test
+	NODE_OPTIONS=--openssl-legacy-provider yarn test
 
 ##########
 ## Misc ##