If you manage domains behind Cloudflare’s proxy and run cPanel with AutoSSL, there’s a good chance you’ve woken up to an email like this: AutoSSL did not renew the certificate for “example.com”. You must take action to keep this site secure. DNS DCV: No local authority: “example.com”; HTTP DCV: “cPanel (powered by Sectigo)” forbids DCV […]
Why AutoSSL Fails Under Cloudflare Proxy Read Post »
If you have recently tried to migrate a cPanel server and watched every single database import fail with ERROR at line 1: Unknown command ‘\-‘, you are not alone. This error has been quietly biting sysadmins for the better part of a year, and cPanel still has not published a word about it. Here is
MariaDB Sandbox Mode Is Silently Breaking Your Database Migrations Read Post »
If you have ever run a cPanel migration or triggered a mailbox format conversion in WHM and found that users are missing emails from specific date ranges, you are not alone. This is one of those issues that does not announce itself with a clear error. It simply leaves gaps in the mailbox, and unless
Maildir to mdbox Conversion Silently Drops Emails for Date Ranges Read Post »
WHM only applies PHP-FPM settings to new accounts, and as we know, the cPanel defaults may not be appropriate for higher-traffic sites. This script updates all existing accounts. #!/bin/bash # bulk-phpfpm-tuner.sh # Updates PHP-FPM pool settings for all accounts based on server RAM TOTAL_RAM_MB=$(free -m | awk ‘/^Mem:/{print $2}’) RESERVED_MB=2048 # Reserve for OS/MySQL ACCOUNTS=$(whmapi1
Bulk PHP-FPM Pool Tuner for Existing Accounts Read Post »
See Also: Bulk PHP-FPM Pool Tuner for Existing Accounts If you manage cPanel servers, you have almost certainly encountered this log entry at some point: [pool username] WARNING: server reached pm.max_children setting (5), consider raising it It looks simple enough. PHP-FPM is telling you it ran out of worker processes to handle incoming requests. But
PHP-FPM pm.max_children Reached on cPanel Servers Read Post »
Cpanel 11.24 comes with an Autofixer that allows you to fix common problems that may prevent access to certain parts of your system.
The cPanel/WHM Autofixer Read Post »
If you’re running cPanel servers that process, store, or transmit credit card data, or even connect to systems that do, PCI DSS compliance isn’t optional. It’s a requirement that carries real financial and legal teeth. With PCI DSS v4.0.1 now fully enforced (the March 31, 2025 deadline for all “best practice” requirements has passed), every
PCI DSS Compliance Cookbook for cPanel Servers Read Post »
For over a decade, ConfigServer Security & Firewall (CSF) was the undisputed firewall solution for cPanel/WHM servers. If you ran a shared hosting environment, a reseller setup, or even a standalone VPS with cPanel, CSF was almost certainly part of your security stack. Its WHM integration, Login Failure Daemon (LFD), and straightforward configuration made
CSF Post-Shutdown Survival Guide: Migration & Configuration Read Post »
If you’ve been running a shared hosting environment for any length of time, you’ve probably had that conversation with a customer: “My WordPress site is slow.” You’ve optimized MySQL, tuned Apache, enabled OPcache—and yet the database queries keep piling up. Enter Redis. Redis is an in-memory data structure store that can dramatically reduce database load
Redis Integration Complete Guide for Multi-Tenant cPanel Read Post »
