Child pages
  • The cpanel.config File
This documentation is for cPanel & WHM version 84 CURRENT builds.  The "RELEASE" version of our documentation can be found in the Version 82 Documentation space.


Skip to end of metadata
Go to start of metadata

Overview

The /var/cpanel/cpanel.config file stores settings for WHM's Tweak Settings interface (WHM >> Home >> Server Configuration >> Tweak Settings). For more about each setting, read the Keys and default settings section below.

Note:

You can preconfigure settings before you install cPanel & WHM. For more information, read our Customize Your Installation documentation.

Cached values

To improve performance, the system caches the /var/cpanel/cpanel.config file's settings in the cpanel.config.cache file. This file updates each time that the /var/cpanel/cpanel.config file updates to keep the cached settings up-to-date.

Configuration setting validation

The settings in the /var/cpanel/cpanel.config file use the key=value format. The system validates each key=value pair whenever you edit these settings. If the system encounters problems during validation, it takes other actions.

Absent cpanel.config file

If the entire /var/cpanel/cpanel.config file does not exist:

  1. The server copies the default /etc/cpanel.config file and saves it as the /var/cpanel/cpanel.config file. 
  2. The server copies the cpanel.config.cache file, if there is one.
    • If the system cannot find the cpanel.config.cache file, it sends an email notification. 
    • You can change your email notification settings in WHM's Contact Manager interface (WHM >> Home >> Server Contacts >> Contact Manager).
  3. For any unset dynamic values, the server attempts to guess the correct value. For example, to set the mailserver value, the server checks whether your system uses the dovecot RPM.
  4. The server logs the changes to the /usr/local/cpanel/logs/error_log file.

Absent values

If a key doesn't exist in the /var/cpanel/cpanel.config file, the server attempts to generate a value from the following sources in the following order:

  1. The server copies the key=value pair from the cpanel.config.cache file, if it exists.
  2. If the key's value is static and it doesn't exist in the cpanel.config.cache file, the system copies the key=value pair from the /usr/local/cpanel/etc/cpanel.config file.
  3. If the key's value is dynamic and it doesn't exist in the cpanel.config.cache file, the server calculates a value.
  4. The server logs the changes to the /usr/local/cpanel/logs/error_log file.

Invalid values

Important:

These variables are deprecated. We will remove them in a later version of cPanel & WHM. If you use them in custom code, update your code to use the rpm.versions system as soon as possible. For more information, read our How to Override the rpm.versions System documentation. 

If one or more of the following values are invalid, the server tries to replace them with valid values:

  • mysql-version
  • local_nameserver_type
  • mailserver
  • ftpserver

Keys and default settings

Note:

You can find the default values for these keys in the /usr/local/cpanel/etc/cpanel.config file.

KeyTweak Settings equivalent

Default and validation requirements

access_log

No Tweak Settings equivalent.

This sets the location of cPanel's Raw Access logs. These logs store general information about cPanel access requests.

/usr/local/cpanel/logs/access_log

account_login_access

System

Accounts that can access a cPanel user account:

owner_root

Warning:

Only set this value to owner, owner_root, or user.

allow_deprecated_accesshash

Security

Allow deprecated WHM accesshash authentication.

Warning:

We deprecated WHM's Remote Access Key feature in cPanel & WHM version 64. We strongly recommend that you use API tokens instead.

0
allow_login_autocomplete

System 

Allow autocomplete in login screens.

1
allow_server_info_status_from

System 

Allow server-info and server-status

undef

allowcpsslinstallSystem 

Allow cPanel users to install SSL Hosts

1


Warning:

If you set this value to 0, cPanel users can't enable the Force HTTPS Redirects option for any domain in cPanel's Domains interface (cPanel >> Home >> Domains >> Domains).

allowparkhostnamedomainsubdomains

Domains

Allow users to park subdomains of the server's hostname.

0
allowparkonothers

Domains 

Allow cPanel users to create subdomains across accounts

0
allowremotedomains

Domains 

Allow Remote Domains

0
allowresellershostnamedomainsubdomains

Domains 

Allow resellers to create accounts with subdomains of the server's hostname.

0
allowunregistereddomains

Domains 

Allow unregistered domains

0
allowwhmparkonothers

Domains 

Allow WHM users to create subdomains across accounts

0
alwaysredirecttossl

Redirection

Choose the closest matched domain for which that the system has a valid certificate when redirecting from non-SSL to SSL URLs. Formerly known as “Always redirect to SSL/TLS”

1
apache_portSystem

Apache non-SSL IP/port

0.0.0.0:80
apache_ssl_portSystem 

Apache SSL port

0.0.0.0:443
api_shellSystem 

cPanel & WHM API shell (for developers)

0
autocreateaentries

Domains

Automatically add A entries for registered nameservers when creating a new zone

1
autodiscover_host

Domains 

Host to publish in the SRV records for Outlook autodiscover support.

cpanelemaildiscovery.cpanel.net
autodiscover_mail_service

Domains 

Preferred mail service to configure to use for Thunderbird and Outlook autodiscover and autoconfig support

imap

autodiscover_proxy_subdomains

Domains

Thunderbird and Outlook autodiscover and autoconfig support (enables service subdomain and SRV record creation)

0

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

autoupdate_certificate_on_hostname_mismatch

Domains

Replace service SSL certificates that do not match the local hostname

1
Awstatsbrowserupdate

Stats and Logs

Allow users to update Awstats from cPanel

0
awstatsreversedns

Stats Programs

Awstats reverse DNS resolution

0
bind_deferred_restart_timeSystem

DNS server reload deferral time

2
blockcommondomains

Domains 

Prevent cPanel users from creating specific domains

1
bwcycle

No Tweak Settings equivalent.

This configures the bandwidth cycle for statistics. You can change this value in WHM's Statistics Software Configuration interface (WHM >> Home >> Server Configuration >> Statistics Software Configuration).

2

Note:

When your server validates the cpanel.config file, it rounds this value to the nearest quarter hour.

cgihidepass

Security

Hide login password from cgi scripts


0
check_zone_owner

Domains 

Check zone owner

1
check_zone_syntax

Domains 

Check zone syntax

1
chkservd_check_intervalSystem

The number of seconds between ChkServd service checks.

300
chkservd_hang_allowed_intervalsSystem

The number of times ChkServd allows a previous check to complete before termination.

2

chkservd_plaintext_notifySystem

The option to enable or disable ChkServd HTML notifications.

0
cluster_autodisable_threshold

No Tweak Settings equivalent.

This sets a number of failed dnsadmin commands. After reaching this number, the system disables that DNS cluster member. You can change this value via the Failure threshold for cluster members setting in WHM's DNS Cluster interface (WHM >> Home >> Clusters >> DNS Cluster).

10
cluster_failure_notifications

No Tweak Settings equivalent.

This sets whether to send an email if the system disables a DNS cluster member. You can change this value via the Receive a notification when WHM disables an unresponsive cluster member setting in WHM's DNS Cluster interface (WHM >> Home >> Clusters >> DNS Cluster).

1
conserve_memorySystem

Conserve memory

0

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

cookieipvalidation

Security

Cookie IP validation

strict

Note:

If this value is 0 when your server validates the cpanel.config file, it converts it to disabled. Otherwise, it uses the default value.

coredump

Security

Generate core dumps

0
cpaddons_adminemail

cPAddons Site Software

cPAddons Site Software admin email

(an empty string)


cpaddons_autoupdate

cPAddons Site Software

cPAddons Site Software source automatic updates

1
cpaddons_max_moderation_req_all_mod

cPAddons Site Software

Max cPAddons Site Software installation requests

99
cpaddons_max_moderation_req_per_mod

cPAddons Site Software

Max cPAddons Site Software installation requests per addon

99
cpaddons_moderation_request

cPAddons Site Software

cPAddons Site Software moderation notification

0
cpaddons_no_3rd_party

cPAddons Site Software

Allow cPAddons Site Software installations from non-cPanel sources

0
cpaddons_no_modified_cpanel

cPAddons Site Software

Allow cPAddons Site Software installations from modified sources

1
cpaddons_notify_owner

cPAddons Site Software

Notify reseller of cPAddons Site Software installations

1
cpaddons_notify_root

cPAddons Site Software

Notify root of cPAddons Site Software installations

1
cpaddons_notify_users

cPAddons Site Software

Notify cPanel users when they need to update their cPAddons Site Software installations

Allow users to choose


cpanel_localeNo Tweak Settings equivalent.undef
cpredirect

Redirection

Non-SSL redirect destination

Origin Domain Name
cpredirectssl

Redirection

SSL redirect destination

SSL Certificate Name
cpsrvd-domainlookupSystem

cpsrvd username domain lookup

0
create_account_dkim

Domains

Enable DKIM on domains for newly created accounts

1
create_account_spf

Domains

Enable SPF on domains for newly created accounts


Note:

The /scripts/enable_spf_dkim_globally script allows you to enable SPF and DKIM for accounts that exist on the server, and to create the appropriate DNS records for their domains. For more information, read our The enable_spf_dkim_globally Script documentation.


1


Note:

On servers that run CentOS 7, you may see a named warning about the absence of SPF resource records on DNS.

  • This warning is not relevant on CentOS 7 servers, because RFC 7208 deprecated SPF records. CentOS 7 servers use TXT records instead of SPF records.
  • Red Hat 7.1 and CentOS 7.1 both contain bind-9.9.4-23.el7, which is an updated version of BIND that complies with RFC 7208. To resolve this issue, update your operating system to a version that contains the updated version of BIND. For more information, read the Red Hat Bugzilla case about SPF record errors.

csp

Security

Enable Content-Security-Policy on some interfaces

0

cycle_hours

No Tweak Settings equivalent.

This setting adjusts log processing frequency. You can change this value in WHM's Statistics Schedule Configuration interface (WHM >> Home >> Server Configuration >> Statistics Software Configuration). 

24

Note:

When your server validates the cpanel.config file, the system rounds this value to the nearest quarter hour.

database_prefix

SQL

Require a username prefix on names of new databases and database users

1
debughooks

No Tweak Settings equivalent.

This setting acts as a fallback setting for the values in the /var/cpanel/debughooks file.

0


default_archive-logs

Stats and Logs

Archive logs in the user's home directory at the end of each stats run unless configured by the user.

1
default_login_theme

Display

Default login theme

cpanel
default_pkg_bwlimit

Packages

Default bandwidth limit for new packages

1048576 MB

default_pkg_max_emailacct_quota

Packages

Default maximum email quota for new packages

Important:

This setting applies to each email account and not each cPanel account.

1024 MB

default_pkg_quota

Packages

Default disk usage quota for new packages

10240 MB

default_remove-old-archived-logs

Stats and Logs

Remove the previous month's archived logs from the user's home directory at the end of each month unless configured by the user.

1
defaultmailaction

Mail

Initial default/catch-all forwarder destination

localuser
disable_cphttpd

System

Prevent cpsrvd from serving standard HTTP ports

0
disable-php-as-reseller-security

Security

Allow PHP to be run when logged in as a reseller to WHM

0
disablequotacacheSystem

Cache disk quota information

0
disk_usage_include_mailman

Mail

Include mailman in disk usage calculations

1
disk_usage_include_sqldbs

SQL

Include databases in disk usage calculations

1
display_cpanel_doclinks

Support

Display documentation links in cPanel interface.

0
dnsadmin_log

Logging

dnsadmin logging level

0
dnsadmin_verbose_sync

Logging 

Enable verbose logging of DNS zone syncing

0
dnsadminapp

Domains

DNS request management application

undef

Note:

If this value is an empty string when your server validates the cpanel.config file, the system converts it to undef.


dnslookuponconnectSystem

Reverse DNS lookup upon connect

0
docroot

No Tweak Settings equivalent.

This setting specifies the document root for WHM.

/usr/local/cpanel/base
domainowner_mail_pass

Mail

Mail authentication via domain owner password

0

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value through the interface.

dormant_services

Software

Dormant services

cpdavd,cphulkd,cpsrvd,dnsadmin,spamd

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value through the interface.


dumplogs

Stats and Logs

Delete each domain's access logs after statistics are gathered

1
email_account_quota_default_selected

Mail

Default quota option for new email accounts

userdefined
email_account_quota_userdefined_default_value

Mail 

Default user-defined quota value for new email accounts

32768
email_outbound_spam_detect_action

Mail 

Select the action for the system to take on an email account when it detects a potential spammer

noaction
email_outbound_spam_detect_enable

Mail

Monitor the number of unique recipients per hour to detect potential spammers.

1
email_outbound_spam_detect_threshold

Mail 

Number of unique recipients per hour to trigger potential spammer notification.

500
email_send_limits_count_mailman

Mail 

Count mailman deliveries towards a domain's Max hourly emails.

0
email_send_limits_defer_cutoff

Mail 

The percentage of email messages (above the account's hourly maximum) to queue and retry for delivery.

125
email_send_limits_max_defer_fail_percentage

Mail 

Maximum percentage of failed or deferred messages a domain may send per hour

undef
email_send_limits_min_defer_fail_to_trigger_protection

Mail

Number of failed or deferred messages a domain may send before protections can be triggered

5
emailarchive

Mail 

Enable Email Archiving support

0
emailpasswords

Security

Send passwords when creating a new account

0
emailsperdaynotify

Mail

Number of emails a domain may send per day before the system sends a notification

No default value.
emailusers_diskusage_critical_contact_admin

Notifications

Notify admin or reseller when disk quota reaches "critical" state

1

emailusers_diskusage_critical_percent

Notifications 

Account disk quota "critical" percentage

90

Note:

If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.

emailusers_diskusage_full_contact_admin

Notifications 

Notify admin or reseller when disk quota reaches "full" state

1

emailusers_diskusage_full_percent

Notifications 

Account disk quota "full" percentage

98

Note:

If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.

emailusers_diskusage_warn_contact_admin

Notifications 

Notify admin or reseller when disk quota reaches "warn" state

0


emailusers_diskusage_warn_percent

Notifications 

Account disk quota "warn" percentage

80

Note:

If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.

emailusers_mailbox_critical_percent

Notifications 

Account disk quota "critical" percentage

90

Note:

If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.

emailusers_mailbox_full_percent

Notifications 

Mailbox disk quota "full" percentage

98

Note:

If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.

emailusers_mailbox_warn_percent

Notifications 

Mailbox disk quota "warn" percentage

80

Note:

If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.

emailusersbandwidthexceed

Notifications 

Send bandwidth limit notification emails

1
emailusersbandwidthexceed70

Notifications 

Bandwidth usage warning: 70%

0
emailusersbandwidthexceed75

Notifications 

Bandwidth usage warning: 75%

0
emailusersbandwidthexceed80

Notifications 

Bandwidth usage warning: 80%

1
emailusersbandwidthexceed85

Notifications 

Bandwidth usage warning: 85%

0
emailusersbandwidthexceed90

Notifications 

Bandwidth usage warning: 90%

0
emailusersbandwidthexceed95

Notifications 

Bandwidth usage warning: 95%

0
emailusersbandwidthexceed97

Notifications 

Bandwidth usage warning: 97%

0
emailusersbandwidthexceed98

Notifications 

Bandwidth usage warning: 98%

0
emailusersbandwidthexceed99

Notifications 

Bandwidth usage warning: 99%

0
empty_trash_days

System

Age of content to purge from users' File Manager Trash

disabled
enablecompileroptimizationsSystem

Enable optimizations for the C compiler

0
enable_piped_logs

No Tweak Settings equivalent.

This sets whether to use piped logging with Apache. You can change this value in WHM's Apache Configuration interface (WHM >> Home >> Service Configuration >> Apache Configuration).

1
enablefileprotect

Security

Enable File Protect

1
engine

No Tweak Settings equivalent.

This sets the name of the cPanel binary.

cpanel

Warning:

Do not modify this value.

enginepl

No Tweak Settings equivalent.

This sets the name of the cpanel.pl file.

cpanel.pl

Warning:

Do not modify this value.

engineroot

No Tweak Settings equivalent.

This sets the location of the cPanel binary.

/usr/local/cpanel

Warning:

Do not modify this value.

exim_retention_days

Stats and Logs

The interval, in days, to retain Exim stats in the database

10
exim-retrytime

Mail

Email delivery retry time

15
eximmailtrap

Mail 

Track email origin via X-Source email headers

1

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

extracpus

Stats and Logs

Extra CPUs for server load

0
file_upload_max_bytesSystem

Max HTTP submission size

undef

Note:

If this value contains unlimited when your server validates the cpanel.config file, it will convert it to undef.


file_upload_must_leave_bytesSystem 

File upload required free space

5
file_usage

Display

Display File Usage information in the cPanel stats bar (inode count)

0
ftpquotacheck_expire_timeSystem 

Interval, in days, between rebuilds of the FTP quota and disk usage data (applies to Pure-FTPd only)

30
ftpserver

No Tweak Settings equivalent.

This sets the FTP server. You can select an FTP server in WHM's FTP Server Selection interface (WHM >> Home >> Service Configuration >> FTP Server Selection).

pure-ftpd

Warning:

  • This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

  • This variable is deprecated. We will remove it in a later version of cPanel & WHM. If your custom code uses this variable, update it to use the rpm.versions system as soon as possible. For more information, read our How to Override the rpm.versions System documentation.
gzip_compression_level

Compression

gzip compression level

6
gzip_pigz_block_size

Compression 

Number of kilobyte chunks per compression work unit

4096
gzip_pigz_processes

Compression 

Number of pigz processes

1

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

horde_cache_empty_days

Mail

Age, in days, of content to purge users' Horde cache files

disabled
htaccess_check_recurseSystem

Depth to recurse for.htaccess checks

2
httpd_deferred_restart_time
 

System

HTTPD deferred restart time

0
ignoredepreciatedSystem 

Enable legacy warnings

0
invite_sub

System

Account Invites for Subaccounts

1
ionice_bandwidth_processingSystem 

I/O priority level at which bandwidth usage is processed

6
ionice_cpbackupSystem 

I/O priority level at which nightly backups are run

6
ionice_dovecot_maintenance

System

I/O priority level at which dovecot_maintenance is run

7
ionice_email_archive_maintenanceSystem 

I/O priority level at which email_archive_maintenance is run

7
ionice_ftpquotacheckSystem 

I/O priority level at which FTP quota checks are run (when Pure-FTPd is enabled)

6
ionice_log_processingSystem 

I/O priority level at which stats logs are processed

7
ionice_quotacheckSystem 

I/O priority level at which quota checks are run

6
ionice_userbackupSystem 

I/O priority level at which cPanel-generated backups are run

7
ionice_userprocSystem 

I/O priority level for user-initiated processes

6
ipv6_controlNo Tweak Settings equivalent.

0

ipv6_listen

System

Listen on IPv6 Addresses

0

jailapache

Security

EXPERIMENTAL: Jail Apache Virtual Hosts using mod_ruid2 and cPanel® jailshell.

0
jaildefaultshellSystem 

Use cPanel® jailshell by default

0
jailmountbinsuid
System 

Jailed /bin mounted suid

Note:

This setting has no effect on servers that run CentOS, CloudLinux™, or Red Hat® Enterprise Linux 7.


0

jailmountusrbinsuidSystem 

Jailed /usr/bin mounted suid

0
jailprocmodeSystem 

Jailed /proc mount method

mount_proc_jailed_fallback_full
keepftplogs

Stats and Logs

Keep master FTP log file

0
keeplogs

Stats and Logs

Keep log files at the end of the month

0
keepstatslog

Stats and Logs

Keep stats logs

0
loadthreshold

Status

Critical load threshold

undef

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

local_nameserver_type

No Tweak Settings equivalent.

This sets your nameserver's type. You can select a nameserver type in WHM's Nameserver Selection interface (WHM >> Home >> Service Configuration >> Nameserver Selection).

bind

Warning:

  • This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

  • This variable is deprecated. We will remove it in a later version of cPanel & WHM. If your custom code uses this variable, update it to use the rpm.versions system as soon as possible. For more information, read our How to Override the rpm.versions System documentation.
logchmod

Stats and Logs

Apache log file chmod value

640
log_successful_logins

Logging

Log successful logins

0
logout_redirect_url

Redirection

Logout redirection URL

"" (an empty string)

mailbox_storage_format

Mail

The storage format for new accounts

maildir
mailserver

No Tweak Settings equivalent.

This sets the mailserver type.

dovecot

Warning:

  • This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

  • This variable is deprecated. We will remove it in a later version of cPanel & WHM. If your custom code uses this variable, update it to use the rpm.versions system as soon as possible. For more information, read our How to Override the rpm.versions System documentation.
maintenance_rpm_version_check

Software

Maintenance cPanel RPM Check

1
maintenance_rpm_version_digest_check

Software

Maintenance cPanel RPM Digest Check

1
maxcpsrvdconnectionsSystem

Max cPanel/WHM/Webmail service handlers

200

Note:

If this value is less than 200 when your server validates the cpanel.config file, it will convert it to the default value.

maxemailsperhour

Mail

Max hourly emails per domain

undef

Note:

If this value evaluates to zero when your server validates the cpanel.config file, it will convert it to undef.


maxmemSystem 

Max cPanel process memory

4096

Note:

This value is dynamic.

min_time_between_apache_graceful_restartsSystem

Minimum time between Apache graceful restarts.

10
minpwstrength

No Tweak Settings equivalent.

This sets the minimum strength for cPanel account passwords. You can set the minimum strength for cPanel users' passwords in WHM's Password Strength Configuration interface (WHM >> Home >> Security Center >> Password Strength Configuration).

65

Note:

When your server validates the cpanel.config file, it rounds this value to the nearest multiple of five.

modsec_keep_hits

Stats and Logs

The number of days to keep records of ModSecurity™ rule hits. (Use zero to keep forever).

7
mycnf_auto_adjust_maxallowedpacket

SQL

Allow cPanel & WHM to determine the best value for your MySQL max_allowed_packet configuration?

1
mycnf_auto_adjust_openfiles_limit

SQL

Allow cPanel & WHM to determine the best value for your MySQL open_files_limit configuration

1
mycnf_auto_adjust_innodb_buffer_pool_size

SQL

Allow cPanel & WHM to determine the best value for your MySQL innodb_buffer_pool_size configuration

0
mysql-version

No Tweak Settings equivalent.

This sets the MySQL® version. You can upgrade to a new MySQL version in WHM's MySQL/MariaDB Upgrade interface (WHM >> Home >> Software >> MariaDB/MySQL Upgrade). 

5.7

Warning:

  • This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

  • This variable is deprecated. We will remove it in a later version of cPanel & WHM. If your custom code uses this variable, update it to use the rpm.versions system as soon as possible. For more information, read our How to Override the rpm.versions System documentation.
mysql-host

No Tweak Settings equivalent.

This sets the MySQL host. You can specify a remote MySQL host in WHM's Remote MySQL interface (WHM >> Home >> Databases >> Remote MySQL).

localhost

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

nobodyspam

Mail

Prevent "nobody" from sending mail

1
nocpbackuplogs

No Tweak Settings equivalent.

This sets whether backups and log analysis run at the same time. You can modify this setting in WHM's Statistics Software Configuration interface (WHM >> Home >> Server Configuration >> Statistics Software Configuration).

0


nosendlangupdates

System

Send language file changes to cPanel

0
notify_expiring_certificates

Notifications

Send notifications when certificates approach expiry

1
numacctlist

Display

Number of accounts per page to display in "List Accounts".

30

Note:

If this value contains all (case-insensitive) when your server validates the cpanel.config file, it will convert it to undef.

overwritecustomproxysubdomains

Domains

Overwrite custom A records used for service subdomains

0
overwritecustomsrvrecords

Domains

Overwrite custom SRV records used by Outlook AutoDiscover support

0
permit_appconfig_entries_without_acls

Security

This setting allows WHM applications and addons to execute even if an ACL list has not been defined.

0
permit_appconfig_entries_without_features

Security

This setting allows cPanel and Webmail applications and addons to execute even if a feature list has not been defined.

0
permit_unregistered_apps_as_reseller

Security

Allow apps that have not registered with AppConfig to be run when logged in as a reseller to WHM.

0
permit_unregistered_apps_as_root

Security 

Allow apps that have not registered with AppConfig to be run when logged in as root or a reseller with the "all" ACL in WHM.

0
php_max_execution_time

PHP

cPanel PHP max execution time

90
php_post_max_size

PHP 

cPanel PHP max POST size

55
php_system_default_version

No Tweak Settings equivalent.

This sets the system's default version of PHP. You can change this value in WHM's MultiPHP Manager interface (WHM >> Home >> Software >> MultiPHP Manager).

ea-php56
php_upload_max_filesize

PHP 

cPanel PHP max upload size

50
phploader

PHP 

cPanel PHP loader

"" (an empty string)
phpopenbasedirhome

No Tweak Settings equivalent.

This setting enables or disables the open_basedir tweak. You can change this value in WHM's MultiPHP INI Editor interface (WHM >> Home >> Software >> MultiPHP INI Editor).

0
pma_disableis

Software

Enable phpMyAdmin information schema searches

0
popbeforesmtp

Mail
Allow users to relay mail if they use an IP address through which someone has validated an IMAP or POP3 login within the last hour (Pop-before-SMTP)

0
popbeforesmtpsenders

Mail

Add X-PopBeforeSMTP header for mail sent via POP-before-SMTP

0
productNo Tweak Settings equivalent.cPanel
proxysubdomains

Domains

Service subdomains

1

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

proxysubdomainsfornewaccounts

Domains

Service subdomain creation

1
proxysubdomainsoverride

Domains

Service subdomain override

1
publichtmlsubsonly

Domains

Restrict document roots to public_html

1
query_apache_for_nobody_senders

No Tweak Settings equivalent.

This sets whether the system will try to find the real sender of messages that the nobody user sent. You can change this value via the Query Apache server status to determine the sender of email sent from processes running as nobody setting in WHM's Exim Configuration Manager interface (WHM >> Home >> Service Configuration >> Exim Configuration Manager).

1 
referrerblanksafety

Security

Blank referrer safety check

0
referrersafety

Security

Referrer safety check

0
remotewhmtimeoutSystem

Remote WHM timeout

35
repquota_timeoutSystem

Disk usage/quota bailout time

60
requiressl

Security

Require SSL

1
resetpassSystem

Reset Password for cPanel accounts

1
resetpass_sub System

Reset Password for cPanel Subaccounts

1
root

No Tweak Settings equivalent.

This sets the location of the cPanel & WHM root installation.

/usr/local/cpanel
rotatelogs_size_threshhold_in_megabytes

Stats and Logs

Log rotation size threshold

300
roundcube_db

No Tweak Settings equivalent.

This sets the type of database that Roundcube uses.

sqlite
rpmupdate_allow_kernel

System

Enable Linux kernel update during nightly maintenance

Off
RS

No Tweak Settings equivalent.

This sets the cPanel interface theme.

paper_lantern
SecurityPolicy::PasswordAge

No Tweak Settings equivalent.

This sets the maximum age, in days, of passwords on the server. You can change this value via the Password Age setting in WHM's Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).

Note:

This setting may not appear in the cpanel.config file until you enable it in the interface.

0
SecurityPolicy::PasswordStrength

No Tweak Settings equivalent.

This sets the required password strength for passwords on the server. You can change this value via the Password Strength setting in WHM's Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).

Note:

This setting may not appear in the cpanel.config file until you enable it in the interface.

0
SecurityPolicy::SourceIPCheck

No Tweak Settings equivalent.

This sets whether to allow unverified IP addresses to log in. You can change this value via the Limit logins to verified IP addresses. setting in WHM's Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).

Note:

This setting may not appear in the cpanel.config file until you enable it in the interface.

0
SecurityPolicy::TwoFactorAuth

No Tweak Settings equivalent.

This sets whether the system requires Two-Factor Authentication. You can change this value via the Two-Factor Authentication setting in WHM's Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).

Note:

This setting may not appear in the cpanel.config file until you enable it in the interface.

0
SecurityPolicy::dnsclustering

No Tweak Settings equivalent.

This sets whether to use your security settings for DNS clusters. You can change this value via the DNS Cluster Requests setting in WHM's Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).

Note:

This setting may not appear in the cpanel.config file until you enable it in the interface.


0
SecurityPolicy::xml-api

No Tweak Settings equivalent.

This sets whether to use your security settings for API requests. You can change this value via the API requests setting in WHM's Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies)

Note:

This setting may not appear in the cpanel.config file until you enable it in the interface.

0
selfsigned_generation_for_bestavailable_ssl_install

Security

Generate a self signed SSL certificate if a CA signed certificate is not available when setting up new domains.

1
send_error_reports

No Tweak Settings equivalent.

0
server_localeSystem

Server Locale

en
show_reboot_banner

Security

Display a message to reboot the server after essential software updates. 

1
showwhmbwusageinmegs

Stats and Logs

Show bandwidth usage in megabytes by default in WHM

0
signature_validation

Security

Signature validation on assets downloaded from cPanel & WHM mirrors.

Release Keyring Only 

Warning:

This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.

skip_chkservd_recovery_notifySystem

The option to enable or disable ChkServd recovery notifications.

0
skipanalog

Stats Programs

Enable Analog stats

0
skipapacheclientsoptimizerNo Tweak Settings equivalent.0
skipawstats

Stats Programs

Enable Awstats stats

0

skipboxcheck

Notifications

Enable mailbox usage warnings

1
skipboxtrapper

Mail

Enable BoxTrapper spam trap

0
skipbwlimitcheck

Notifications

Bandwidth limit check

0
skipchkservd

No Tweak Settings equivalent.

This sets whether to monitor the chkservd service. You can change this value via the ChkServd setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0
skipcpbandwd

No Tweak Settings equivalent.

This sets whether to monitor bandwidth. You can change this value via the cPBandwd setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0
skipdiskcheck

Notifications

Disk quota usage warnings

0
skipdiskusage

Notifications

System disk space usage warnings

0
skipeximstats

No Tweak Settings equivalent.

This sets whether to monitor mail services. You can change this value via the Eximstats setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0
skiphorde

Mail

Enable Horde Webmail

Note:

This setting does not uninstall Horde.

0
skiphttpauth

No Tweak Settings equivalent.

1
skipjailmanager

No Tweak Settings equivalent.

This sets whether to monitor jailed shells. You can change this value via the JailManager setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0
skipmailauthoptimizer

No Tweak Settings equivalent.

You can change this value via the MailAuthOptimizer setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0
skipmailman

Mail

Enable Mailman mailing lists

0
skipmodseclog

No Tweak Settings equivalent.

This sets whether to monitor IP addresses for IMAP and POP3 sessions. You can change this value via the RecentAuthedMailIp setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0
skipoomcheck

Notifications

Out of memory warnings.

0
skipnotifyacctbackupfailureSystem

Send a notification when a user's backup has errors

0
skipparentcheckSystem

Allow other applications to run the cPanel and admin binaries

0
skiprecentauthedmailiptracker

No Tweak Settings equivalent.

This sets whether to monitor ModSecurity logs. You can change this value via the ModSecLog setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0 
skiproundcube

Mail

Enable Roundcube webmail

0
skipspamassassin

Mail

Enable Apache SpamAssassin™ spam filter

0
skipspambox

Mail

Enable Apache SpamAssassin™ Spam Box delivery for messages marked as spam (user configurable).

0
skiptailwatchd

No Tweak Settings equivalent.

This sets whether to monitor the tailwatchd service. You can change this value via the tailwatchd setting in WHM's Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

0
skipwebalizer

Stats Programs

Enable Webalizer stats

0
smtpmailgidonly

Mail

Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak)

1
ssh_host_key_checking

Security

Enable strict SSH host key checking

0
statsloglevel

Stats and Logs

Stats log level

1
stats_log

No Tweak Settings equivalent.

This setting specifies the location of the stats_log file.

/usr/local/cpanel/logs/stats_log
statthreshhold

No Tweak Settings equivalent.

This sets the minimum amount of disk space to process statistics.

Note:

If an account doesn't meet this minimum, the system doesn't process statistics for it.

256

system_diskusage_critical_percent

Notifications

Account system disk usage "critical" percentage

92.55
system_diskusage_warn_percent

Notifications 

Account system disk usage "warn" percentage

82.55
tcp_check_failure_thresholdSystem

ChkServd TCP check failure threshold

3

Note:

If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.

transfers_timeoutSystem 

Number of seconds an SSH connection related to an account transfer may be inactive before timing out

1800
tweak_unset_vars

No Tweak Settings equivalent.

This sets which items display warning icons in WHM's Tweak Settings interface (WHM >> Home >> Server Configuration >> Tweak Settings).

No default value.

Note:

The system only uses this value internally.

upcp_log_retention_days

Stats and Logs

Number of days to retain upcp logs before purging them

45
update_log_analysis_retention_length

Support

Update analysis retention interval

90
use_apache_md5_for_htaccess

Security

Use MD5 passwords with Apache

1
use_information_schema

SQL

Use INFORMATION_SCHEMA to acquire MySQL disk usage (MySQL 5+ required)

1
useauthnameservers

Domains

Always use authoritative (registered) nameservers when creating a new DNS zone.

0
usemailformailmanurl

Mail

Prefix "mail." onto Mailman URLs

0
usemysqloldpass

SQL

Use pre-4.1-style MySQL® passwords

0
userdirprotect

No Tweak Settings equivalent.

This setting enables or disables the mod_userdir tweak. You can change this setting in WHM's Apache mod_userdir Tweak interface (WHM >> Home >> Security Center >> Apache mod_userdir Tweak).

1
verify_3rdparty_cpaddons

Security

Verify signatures of 3rdparty cPaddons.

0
versionNo Tweak Settings equivalent.3.4
VFILTERDIR

No Tweak Settings equivalent.

This sets the location of the Exim email filter storage directory.

/etc/vfilters
xframecpsrvd

Security

Use X-Frame-Options and X-Content-Type-Options headers with cpsrvd

1

Additional documentation