A spiking Exim queue is one of those early warning signs that something on a cPanel server has gone sideways. Sometimes it is a compromised account blasting out phishing mail. Sometimes it is a legitimate client running a poorly throttled newsletter. Sometimes it is a contact form with no captcha that a bot has discovered. […]
Finding Top Exim Queue Abusers by cPanel Account Read Post »
You’ve just completed a cPanel server migration. The accounts are transferred, DNS is propagating, everything looks good… until you check the AutoSSL logs and see this staring back at you: WARN AutoSSL failed to create a new certificate order because the server’s Let’s Encrypt account (https://acme-v02.api.letsencrypt.org/acme/acct/XXXXXXX) has reached a rate limit. (429 urn:ietf:params:acme:error:rateLimited) Every domain
AutoSSL Let’s Encrypt Rate Limiting Read Post »
If you have recently migrated to AlmaLinux 9 (or any RHEL 9 derivative) and run ConfigServer Security & Firewall (CSF) with Login Failure Daemon (LFD), you have probably noticed your inbox filling up with alerts like these: Time: Wed Feb 19 03:14:22 2025 Account: root Resource: Virtual Memory Size Exceeded: 384 > 256 (MB) Executable:
How to Fix CSF/LFD “Excessive Resource Usage” Floods for PHP-FPM and dbus on AlmaLinux 9 Read Post »
If you manage domains behind Cloudflare’s proxy and run cPanel with AutoSSL, there’s a good chance you’ve woken up to an email like this: AutoSSL did not renew the certificate for “example.com”. You must take action to keep this site secure. DNS DCV: No local authority: “example.com”; HTTP DCV: “cPanel (powered by Sectigo)” forbids DCV
Why AutoSSL Fails Under Cloudflare Proxy Read Post »
If you have recently tried to migrate a cPanel server and watched every single database import fail with ERROR at line 1: Unknown command ‘\-‘, you are not alone. This error has been quietly biting sysadmins for the better part of a year, and cPanel still has not published a word about it. Here is
MariaDB Sandbox Mode Is Silently Breaking Your Database Migrations Read Post »
If you have ever run a cPanel migration or triggered a mailbox format conversion in WHM and found that users are missing emails from specific date ranges, you are not alone. This is one of those issues that does not announce itself with a clear error. It simply leaves gaps in the mailbox, and unless
Maildir to mdbox Conversion Silently Drops Emails for Date Ranges Read Post »
WHM only applies PHP-FPM settings to new accounts, and as we know, the cPanel defaults may not be appropriate for higher-traffic sites. This script updates all existing accounts. #!/bin/bash # bulk-phpfpm-tuner.sh # Updates PHP-FPM pool settings for all accounts based on server RAM TOTAL_RAM_MB=$(free -m | awk ‘/^Mem:/{print $2}’) RESERVED_MB=2048 # Reserve for OS/MySQL ACCOUNTS=$(whmapi1
Bulk PHP-FPM Pool Tuner for Existing Accounts Read Post »
See Also: Bulk PHP-FPM Pool Tuner for Existing Accounts If you manage cPanel servers, you have almost certainly encountered this log entry at some point: [pool username] WARNING: server reached pm.max_children setting (5), consider raising it It looks simple enough. PHP-FPM is telling you it ran out of worker processes to handle incoming requests. But
PHP-FPM pm.max_children Reached on cPanel Servers Read Post »
Cpanel 11.24 comes with an Autofixer that allows you to fix common problems that may prevent access to certain parts of your system.
The cPanel/WHM Autofixer Read Post »
