ImunifyAV is a free Antivirus for Cpanel servers by CloudLinux.
https://www.imunify360.com/antivirus
To install Imunify Anti Virus on Cpanel CloudLinux server, run
|
1 |
yum install imunify-antivirus-cpanel |
On non CLoudLinux servers, run
|
1 2 |
wget https://repo.imunify360.cloudlinux.com/defence360/imav-deploy.sh bash imav-deploy.sh |
For Plesk, it is available as an extension
https://www.plesk.com/extensions/revisium-antivirus-2/
See cloudlinux
On CloudLinux server, EasyApache profile was missing.
WHM shows following error message
|
1 |
Please run “yum install ea-profiles-cpanel” to install the default cPanel profiles. |
Re installing ea-profiles-cpanel did not help.
The issue is resolved by running
|
1 |
# cd ~; wget https://repo.cloudlinux.com/cloudlinux/sources/cloudlinux_ea3_to_ea4; sh cloudlinux_ea3_to_ea4 --convert |
See Cpanel
To install LiteSpeed Web Server on Cpanel Server, run
|
1 2 3 |
wget https://www.litespeedtech.com/packages/cpanel/lsws_whm_autoinstaller.sh chmod a+x lsws_whm_autoinstaller.sh ./lsws_whm_autoinstaller.sh TRIAL |
This will instal 15 day TRAIl version of the LiteSpeed Web Server. Once you purchased license, you will be able to update license key in WHM.
LiteSpeed Web Server installed on folder
|
1 |
/usr/src/lsws |
To restart LiteSpeed, run
|
1 |
systemctl restart lsws |
Once LiteSpeed installed, you need to switch to LiteSpeed by running
|
1 |
/usr/local/lsws/admin/misc/cp_switch_ws.sh lsws |
You can also do this in WHM.
You can login to web interface at
|
1 |
https://IPADDR:7080/login.php |
You will need admin password to login here, to set admin password, run
|
1 |
/usr/local/lsws/admin/misc/admpass.sh |
CloudLinux provides high performance PHP module lsapi. It is a replacement for suphp available on cpanel servers. lsapi module is a based on LiteSpeed Technologies API for PHP.
To enable lsapi in CloudLinux Cpanel Server, go to
|
1 |
WHM > EasyApache 4 |
Provision profile
|
1 |
CloudLinux + All PHP Options + OpCache + mod_lsapi |
Click “Provision” and wait until the software is updated.
Now you need to set lsapi as default PHP handler. To do this, go to
|
1 |
WHM > MultiPHP Manager |
Click on “PHP Handlers”.
On Next page, you can set handler for each PHP versions.
You can set PHP handler to lsapi gloabally using following command
|
1 |
/usr/bin/switch_mod_lsapi --enable-global |
Once you run it, all PHP version handlers will get chanegd to lsapi.
If you check PHP info, you will see Server API listed as LiteSpeed.
Many server providers setup server with smaller / partition like 20 GB. This is fine for normal Linux Servers, you will need more disk space on Cpanel Servers. Many use CloudLinux on Cpanel Servers, this will require you to have more free disk space on / partition.
The partition i use for Cpanel Servers are
|
1 2 3 |
/ = 122880 MB (120 GB) /home = rest of the disk swap = 8192 MB (8 GB) |
I don’t create seperate partition for /usr and /var as this will use up more space, may end up one of the partition get filled up while other have lot of free space. Having one partition for /, you don’t need to worry much.
Another partition scheme is give everything to /
|
1 2 |
/ = All of the disk. swap = 8 GB |
To install mod_remoteip in Cpanel Server, run
|
1 |
yum install ea-apache24-mod_remoteip |
Edit file
|
1 |
vi /etc/apache2/conf.modules.d/370_mod_remoteip.conf |
Add
|
1 2 |
RemoteIPHeader X-Forwarded-For RemoteIPTrustedProxy 127.0.0.1 PROXY_SERVER_IP_HERE |
Restart Apache.
|
1 |
systemctl restart apache2 |
At this stage, PHP applications will show proper visitor IP address.
Apache access logs will still show proxy server IP. To fix this, edit Apache configuration file.
Find
|
1 2 |
LogFormat "%h %l %u %t \"%r\" %>s %b" common LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined |
Replace with
|
1 2 |
LogFormat "%a %l %u %t \"%r\" %>s %b" common LogFormat "%a %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined |
Restart Apache
|
1 |
systemctl restart apache2 |
On a cpanel server, PHP scripts can’t sent email. Incoming and outgoing emails for email users (mailbox) are working properly.
To debug, loggged in to SSH as one of the cpanel user.
|
1 |
su - CPANEL_USER |
If SSH access is not enabled, enable SSH in WHM.
Once logged in, verify sendmail works.
|
1 2 3 4 |
[sabtempco@buffalo ~]$ sendmail -f noreply@serverok.in admin@serverok.in sendmail: Not running with correct effective GID. Is sendmail binary setgid mailtrap? sendmail: Not running with correct effective GID. Is sendmail binary setgid mailtrap? [sabtempco@buffalo ~]$ |
I get above error message. This is because permission error with /usr/sbin/sendmail.
To fix, run
|
1 2 3 |
chmod +x /usr/sbin/sendmail chmod g+s /usr/sbin/sendmail chown root:mailtrap /usr/sbin/sendmail |
If you are using CloudLinux CageFS, try disable and see if it works. If it work after you disable CafeFS, run
|
1 |
cagefsctl --force-update |
phpSHIELD is an encoder that encode PHP scripts so no one can read your source code.
They actually resell SourceGuardian Encoder, so you can install Sourceguardian loaders.
Cpanel Servers come with sourceguardian loader, to install follow the instructions here.
To install sourceguardian PHP loaders in Cpanel server, run
|
1 |
yum install -y ea-php56-php-sourceguardian.x86_64 ea-php70-php-sourceguardian.x86_64 ea-php71-php-sourceguardian.x86_64 ea-php72-php-sourceguardian.x86_64 |
Cpanel will provide Free SSL for server hostname if server hostname resolve to servers main IP address and server have valid cpanel license.
Cpanel will check for hostname SSL when upcp runs. This is run once everyday.
You can manually run SSL check by running
|
1 |
/usr/local/cpanel/bin/checkallsslcerts |
If you have a paid SSL, you can install it in
WHM > Service Configuration > Manage Service SSL Certificates
