The cpanel.config File

Valid for versions 84 through the latest version

Version:

82

84


Last modified: December 30, 2019

Overview

The /var/cpanel/cpanel.config file stores settings for WHM’s Tweak Settings interface (WHM >> Home >> Server Configuration >> Tweak Settings).

Note:

You can preconfigure settings before you install cPanel & WHM. For more information, read our Customize Your Installation documentation.

Cached values

To improve performance, the system caches the /var/cpanel/cpanel.config file’s settings in the cpanel.config.cache file. This file updates each time that the /var/cpanel/cpanel.config file updates, to keep the cached settings up-to-date.

Configuration setting validation

The settings in the /var/cpanel/cpanel.config file use the key=value format. The system validates each key=value pair whenever you edit these settings. If the system encounters problems during validation, it takes other actions.

Absent cpanel.config file

If the entire /var/cpanel/cpanel.config file does not exist:

  1. The server copies the default /etc/cpanel.config file and saves it as the /var/cpanel/cpanel.config file.
  2. The server copies the cpanel.config.cache file, if there is one.
    • If the system cannot find the cpanel.config.cache file, it sends an email notification.
    • You can change your email notification settings in WHM’s Contact Manager interface (WHM >> Home >> Server Contacts >> Contact Manager).
  3. For any unset dynamic values, the server attempts to guess the correct value. For example, to set the mailserver value, the server checks whether your system uses the dovecot RPM.
  4. The server logs the changes to the /usr/local/cpanel/logs/error_log file.

Absent values

If a key doesn’t exist in the /var/cpanel/cpanel.config file, the server attempts to generate a value from the following sources in the following order:

  1. The server copies the key=value pair from the cpanel.config.cache file, if it exists.
  2. If the key’s value is static and it doesn’t exist in the cpanel.config.cache file, the system copies the key=value pair from the /usr/local/cpanel/etc/cpanel.config file.
  3. If the key’s value is dynamic and it doesn’t exist in the cpanel.config.cache file, the server calculates a value.
  4. The server logs the changes to the /usr/local/cpanel/logs/error_log file.

Invalid values

If one or more of the following values are invalid, the server tries to replace them with valid values:

  • mysql-version
  • local_nameserver_type
  • mailserver
  • ftpserver

Keys and default settings

Note:

You can find the default values for these keys in the /usr/local/cpanel/etc/cpanel.config file.

Key Tweak Settings section Setting or description Default and validation requirements
access_log No Tweak Settings equivalent. This sets the location of cPanel’s Raw Access logs. These logs store general information about cPanel access requests. /usr/local/cpanel/logs/access_log
account_login_access System Accounts that can access a cPanel user account. owner_root
Warning:
Only set this value to owner, owner_root, or user.
adminuser No Tweak Settings equivalent. cpanel
allow_deprecated_accesshash Security Allow deprecated WHM accesshash authentication
Warning:
We deprecated WHM’s Remote Access Key feature in cPanel & WHM version 64. We strongly recommend that you use API tokens instead.
allow_login_autocomplete System Allow autocomplete in login screens. 1
allow_server_info_status_from System Allow server-info and server-status undef
allowcpsslinstall System Allow cPanel users to install SSL Hosts 1
Warning:
If you set this value to 0, cPanel users can’t enable the Force HTTPS Redirects option for any domain in cPanel’s Domains interface (cPanel >> Home >> Domains >> Domains).
allowparkhostnamedomainsubdomains Domains Allow users to park subdomains of the server’s hostname. 0
allowparkonothers Domains Allow cPanel users to create subdomains across accounts. 0
allowremotedomains Domains Allow Remote Domains 0
allowresellershostnamedomainsinsubdomains Domains Allow resellers to create accounts with subdomains of the server’s hostname. 0
allowunregistereddomains Domains Allow unregistered domains 0
allowwhmparkonothers Domains Allow WHM users to create subdomains across accounts 0
alwaysredirecttossl Redirection Choose the closest matched domain for which that the system has a valid certificate when redirecting from non-SSL to SSL URLs. Formerly known as “Always redirect to SSL/TLS” 1
apache_port System Apache non-SSL IP/port 0.0.0.0:80
apache_ssl_port System Apache SSL port 0.0.0.0:443
api_shell System cPanel & WHM API shell (for developers) 0
autocreateaentries Domains Automatically add A entries for registered nameservers when creating a new zone 1
autodiscover_host Domains Host to publish in the SRV records for Outlook autodiscover support. cpanelemaildiscovery.cpanel.net
autodiscover_mail_service Domains Preferred mail service to configure to use for Thunderbird and Outlook autodiscover and autoconfig support imap
autodiscover_proxy_subdomains Domains Thunderbird and Outlook autodiscover and autoconfig support (enables service subdomain and SRV record creation) 0
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
autoupdate_certificate_on_hostname_mismatch Domains Replace service SSL certificates that do not match the local hostname 1
awstatsbrowserupdate Stats and Logs Allow users to update Awstats from cPanel 0
awstatsreversedns Stats Programs Awstats reverse DNS resolution 0
basename No Tweak Settings equivalent. cpanel
bind_deferred_restart_time System DNS server reload deferral time 0
blockcommondomains Domains Prevent cPanel users from creating specific domains 1
bwcycle No Tweak Settings equivalent. This configures the bandwidth cycle for statistics. You can change this value in WHM’s Statistics Software Configuration interface (WHM >> Home >> Server Configuration >> Statistics Software Configuration). 2
Note:
When your server validates the cpanel.config file, it rounds this value to the nearest quarter hour.
cgihidepass Security Hide login password from cgi scripts 0
check_zone_owner Domains Check zone owner 1
check_zone_syntax Domains Check zone syntax 1
chkservd_check_interval System The number of seconds between ChkServd service checks. 300
chkservd_hang_allowed_intervals System The number of times ChkServd allows a previous check to complete before termination. 2
chkservd_plaintext_notify System The option to enable or disable ChkServd HTML notifications. 0
cluster_autodisable_threshold No Tweak Settings equivalent. This sets a number of failed dnsadmin commands. After reaching this number, the system disables that DNS cluster member. You can change this value via the Failure threshold for cluster members setting in WHM’s DNS Cluster interface (WHM >> Home >> Clusters >> DNS Cluster). 10
cluster_failure_notifications No Tweak Settings equivalent. This sets whether to send an email if the system disables a DNS cluster member. You can change this value via the Receive a notification when WHM disables an unresponsive cluster member setting in WHM’s DNS Cluster interface (WHM >> Home >> Clusters >> DNS Cluster). 1
conserve_memory System Conserve memory 0
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
cookieipvalidation Security Cookie IP validation strict
coredump Security Generate core dumps 0
cpaddons_adminemail cPAddons Site Software cPAddons Site Software admin email (an empty string)
cpaddons_autoupdate cPAddons Site Software cPAddons Site Software source automatic updates 1
cpaddons_max_moderation_req_all_mod cPAddons Site Software Max cPAddons Site Software installation requests 99
cpaddons_max_moderation_req_per_mod cPAddons Site Software Max cPAddons Site Software installation requests per addon 99
cpaddons_moderation_request cPAddons Site Software cPAddons Site Software moderation notification 0
cpaddons_no_3rd_party cPAddons Site Software Allow cPAddons Site Software installations from non-cPanel sources 0
cpaddons_no_modified_cpanel cPAddons Site Software Allow cPAddons Site Software installations from modified sources 1
cpaddons_notify_owner cPAddons Site Software Notify reseller of cPAddons Site Software installations 1
cpaddons_notify_root cPAddons Site Software Notify root of cPAddons Site Software installations 1
cpaddons_notify_users cPAddons Site Software Notify cPanel users when they need to update their cPAddons Site Software installations Allow users to choose
cpanel_locale No Tweak Settings equivalent. undef
cpredirect Redirection Non-SSL redirect destination Origin Domain Name
cpredirectssl Redirection SSL redirect destination SSL Certificate Name
cpsrvd-domainlookup System cpsrvd username domain lookup 0
create_account_dkim Domains Enable DKIM on domains for newly created accounts 1
create_account_spf Domains Enable SPF on domains for newly created accounts
Note:
The /scripts/enable_spf_dkim_globally script allows you to enable SPF and DKIM for accounts that exist on the server, and to create the appropriate DNS records for their domains. For more information, read our The enable_spf_dkim_globally Script documentation.
1
Note:
On servers that run CentOS 7, you may see a named warning about the absence of SPF resource records on DNS.
  • This warning is not relevant on CentOS 7 servers because RFC 7208 deprecated SPF records. CentOS 7 servers use TXT records instead of SPF records.
  • Red Hat Enterprise Linux 7.1 and CentOS 7.1 both contain bind-9.9.4-23.el7, which is an updated version of BIND that complies with RFC 7208. To resolve this issue, update your operating system to a version that contains the updated version of BIND. For more information, read the Red Hat Bugzilla case about SPF record errors.
csp Security Enable Content-Security-Policy on some interfaces 0
cycle_hours No Tweak Settings equivalent. This setting adjusts log processing frequency. You can change this value in WHM’s Statistics Software Configuration interface (WHM >> Home >> Server Configuration >> Statistics Software Configuration). 24
Note:
When your server validates the cpanel.config file, the system rounds this value to the nearest quarter hour.
database_prefix SQL Require a username prefix on names of new databases and database users 1
debughooks No Tweak Settings equivalent. This setting acts as a fallback setting for the values in the /var/cpanel/debughooks file. 0
default_archive-logs Stats and Logs Archive logs in the user’s home directory at the end of each stats run unless configured by the user. 1
default_login_theme Display Default login theme cpanel
default_pkg_bwlimit Packages Default bandwidth limit for new packages 1048576 MB
default_pkg_max_emailacct_quota Packages Default maximum email quota for new packages.
Important:
This setting applies to each email account and not each cPanel account.
1024 MB
default_pkg_quota Packages Default disk usage quota for new packages 10240 MB
default_remove-old-archived-logs Stats and Logs Remove the previous month’s archived logs from the user’s home directory at the end of each month unless configured by the user. 1
defaultmailaction Mail Initial default/catch-all forwarder destination localuser
disable_cphttpd System Prevent cpsrvd from serving standard HTTP ports 0
disable-php-as-reseller-security Security Allow PHP to be run when logged in as a reseller to WHM 0
disablequotacache System Cache disk quota information 0
disk_usage_include_mailman Mail Include mailman in disk usage calculations 1
disk_usage_include_sqldbs SQL Include databases in disk usage calculations 1
display_cpanel_doclinks Support Display documentation links in the cPanel interface. 0
dnsadmin_log Logging dnsadmin logging level 0
dnsadmin_verbose_sync Logging Enable verbose logging of DNS zone syncing 0
dnsadminapp Domains DNS request management application undef
Note:
If this value is an empty string when your server validates the cpanel.config file, the system converts it to undef.
dnslookupconnect System Reverse DNS lookup upon connect 0
docroot No Tweak Settings equivalent. This setting specifies the document root for WHM. /usr/local/cpanel/base
domainowner_mail_pass Mail Mail authentication via domain owner password 0
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value through the interface.
dormant_services Software Dormant services cpdavd,cphulkd,cpsrvd,dnsadmin,spamd
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value through the interface.
dumplogs Stats and Logs Delete each domain’s access logs after statistics are gathered 1
email_account_quota_default_selected Mail Default quota option for new email accounts 250
email_account_quota_userdefined_default_value Mail Default user-defined quota value for new email accounts 250
email_outbound_spam_detect_action Mail Select the action for the system to take on an email account when it detects a potential spammer noaction
email_outbound_spam_detect_enable Mail Monitor the number of unique recipients per hour to detect potential spammers. on
email_outbound_spam_detect_threshold Mail Number of unique recipients per hour to trigger potential spammer notification. 500
email_send_limits_count_mailman Mail Count mailman deliveries towards a domain’s Max hourly emails. 0
email_send_limits_defer_cutoff Mail The percentage of email messages (above the account’s hourly maximum) to queue and retry for delivery. 125
email_send_limits_max_defer_fail_percentage Mail Maximum percentage of failed or deferred messages a domain may send per hour undef
email_send_limits_min_defer_fail_to_trigger_protection Mail Number of failed or deferred messages a domain may send before protections can be triggered 5
emailarchive Mail Enable Email Archiving support 0
emailpasswords Security Send passwords when creating a new account 0
emailsperdaynotify Mail Number of emails a domain may send per day before the system sends a notification No default value.
emailusers_diskusage_critical_contact_admin Notifications Notify admin or reseller when disk quota reaches “critical” state 1
emailusers_diskusage_critical_percent Notifications Account disk quota “critical” percentage 90
Note:
If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.
emailusers_diskusage_full_contact_admin Notifications Notify admin or reseller when disk quota reaches “full” state 1
emailusers_diskusage_full_percent Notifications Account disk quota “full” percentage 98
Note:
If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.
emailusers_diskusage_warn_contact_admin Notifications Notify admin or reseller when disk quota reaches “warn” state 0
emailusers_diskusage_warn_percent Notifications Account disk quota “warn” percentage 80
Note:
If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.
emailusers_mailbox_critical_percent Notifications Mailbox disk quota “critical” percentage 90
Note:
If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.
emailusers_mailbox_full_percent Notifications Mailbox disk quota “full” percentage 98
Note:
If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.
emailusers_mailbox_warn_percent Notifications Mailbox disk quota “warn” percentage 80
Note:
If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.
emailusersbandwidthexceed Notifications Send bandwidth limit notification emails 1
emailusersbandwidthexceed70 Notifications Bandwidth usage warning: 70% 0
emailusersbandwidthexceed75 Notifications Bandwidth usage warning: 75% 0
emailusersbandwidthexceed80 Notifications Bandwidth usage warning: 80% 1
emailusersbandwidthexceed85 Notifications Bandwidth usage warning: 85% 0
emailusersbandwidthexceed90 Notifications Bandwidth usage warning: 90% 0
emailusersbandwidthexceed95 Notifications Bandwidth usage warning: 95% 0
emailusersbandwidthexceed97 Notifications Bandwidth usage warning: 97% 0
emailusersbandwidthexceed98 Notifications Bandwidth usage warning: 98% 0
emailusersbandwidthexceed99 Notifications Bandwidth usage warning: 99% 0
empty_trash_days System Bandwidth usage warning: 99% disabled
enablecompileroptimizations System Enable optimizations for the C compiler 0
enable_piped_logs No Tweak Settings equivalent. This sets whether to use piped logging with Apache. You can change this value in WHM’s Apache Configuration interface (WHM >> Home >> Service Configuration >> Apache Configuration). 0
enablefileprotect Security Enable File Protect 1
engine No Tweak Settings equivalent. This sets the name of the cPanel binary. cpanel
Warning:
Do not modify this value.
enginepl No Tweak Settings equivalent. This sets the name of the cpanel.pl file. cpanel.pl
Warning:
Do not modify this value.
engineroot No Tweak Settings equivalent. This sets the location of the cPanel binary. /usr/local/cpanel
Warning:
Do not modify this value.
exim_retention_days Stats and Logs The interval, in days, to retain Exim stats in the database 10
exim-retrytime Mail Email delivery retry time 15
eximmailtrap Mail Track email origin via X-Source email headers 1
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
extracpus Stats and Logs Extra CPUs for server load 0
file_upload_max_bytes System Max HTTP submission size undef
Note:
If this value is unlimited when your server validates the cpanel.config file, the system converts it to undef.
file_upload_must_leave_bytes System File upload required free space 5
file_usage Display Display File Usage information in the cPanel stats bar (inode count) 0
ftpserver No Tweak Settings equivalent. This sets the FTP server. You can select an FTP server in WHM’s FTP Server Selection interface (WHM >> Home >> Service Configuration >> FTP Server Selection). pure-ftpd
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
gzip_compression_level Compression gzip compression level 6
gzip_pigz_block_size Compression Number of kilobyte chunks per compression work unit 4096
gzip_pigz_processes Compression Number of pigz processes 1
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
horde_cache_empty_days Mail Age, in days, of content to purge users’ Horde cache files disabled
htaccess_check_recurse System Depth to recurse for .htaccess checks 2
httpd_deferred_restart_time System HTTPD deferred restart time 0
ignoredepreciated System Enable legacy warnings 0
invite_sub System Account Invites for Subaccounts On
ionice_bandwidth_processing System I/O priority level at which bandwidth usage is processed 4
ionice_cpbackup System I/O priority level at which nightly backups are run 3
ionice_dovecot_maintenance System I/O priority level at which dovecot_maintenance is run 7
ionice_email_archive_maintenance System I/O priority level at which email_archive_maintenance is run 6
ionice_ftpquotacheck System I/O priority level at which FTP quota checks are run (when Pure-FTPd is enabled) 6
ionice_log_processing System I/O priority level at which stats logs are processed 4
ionice_quotacheck System I/O priority level at which quota checks are run 6
ionice_userbackup System I/O priority level at which cPanel-generated backups are run 5
ionice_userproc System I/O priority level for user-initiated processes 5
ipv6_control No Tweak Settings equivalent. 0
ipv6_listen System Listen on IPv6 Addresses 0
jailapache Security EXPERIMENTAL: Jail Apache Virtual Hosts using mod_ruid2 and cPanel® jailshell. 0
jaildefaultshell System Use cPanel® jailshell by default 0
jailmountbinsuid System Jailed /bin mounted suid
Note:
This setting has no effect on servers that run CentOS, CloudLinux™, or Red Hat® Enterprise Linux 7.
0
jailmountusrbinsuid System Jailed /usr/bin mounted suid 0
jailprocmode System Jailed /proc mount method mount_proc_jailed_fallback_full
keepftplogs Stats and Logs Keep master FTP log file 0
keeplogs Stats and Logs Keep log files at the end of the month 0
keepstatslog Stats and Logs Keep stats logs 0
loadthreshold Status Critical load threshold undef
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
local_nameserver_type No Tweak Settings equivalent. This sets your nameserver’s type. You can select a nameserver type in WHM’s Nameserver Selection interface (WHM >> Home >> Service Configuration >> Nameserver Selection). powerdns
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
logchmod Stats and Logs Apache log file chmod value 640
log_successful_logins Logging Log successful logins 0
logout_redirect_url Redirection Logout redirection URL ”” (an empty string)
mailbox_storage_format Mail The storage format for new accounts maildir
mailserver No Tweak Settings equivalent. This sets the mailserver type. dovecot
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
maintenance_rpm_version_check Software Maintenance cPanel RPM Check 1
maintenance_rpm_version_digest_check Software Maintenance cPanel RPM Digest Check 1
maxcpsrvdconnections System Max cpanel/whm/Webmail service handlers 200
Note:
If this value is less than 200 when your server validates the cpanel.config file, it will convert it to the default value.
maxemailsperhour Mail Max hourly emails per domain undef
Note:
If this value evaluates to zero when your server validates the cpanel.config file, it will convert it to undef.
maxmem System Max cPanel process memory 512
Note:
This value is dynamic.
min_time_between_apache_graceful_restarts System Minimum time between Apache graceful restarts. 10
minpwstrength No Tweak Settings equivalent. This sets the minimum strength for cPanel account passwords. You can set the minimum strength for cPanel users’ passwords in WHM’s Password Strength Configuration interface (WHM >> Home >> Security Center >> Password Strength Configuration). 0
Note:
When your server validates the cpanel.config file, it rounds this value to the nearest multiple of five.
modsec_keep_hits Stats and Logs The number of days to keep records of ModSecurity™ rule hits. (Use zero to keep forever). 7
mycnf_auto_adjust_maxallowedpacket SQL Allow cPanel & WHM to determine the best value for your MySQL max_allowed_packet configuration? 1
mycnf_auto_adjust_openfiles_limit SQL Allow cPanel & WHM to determine the best value for your MySQL open_files_limit configuration 1
mycnf_auto_adjust_innodb_buffer_pool_size SQL Allow cPanel & WHM to determine the best value for your MySQL innodb_buffer_pool_size configuration 1
myname No Tweak Settings equivalent. cpaneld
mysql-version No Tweak Settings equivalent. This sets the MySQL® version. You can upgrade to a new MySQL version in WHM’s MariaDB/MySQL Upgrade interface (WHM >> Home >> SQL Services >> MariaDB/MySQL Upgrade). 5.7
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
mysql-host No Tweak Settings equivalent. This sets the MySQL host. You can specify a remote MySQL host in cPanel’s Remote MySQL interface (cPanel >> Home >> Databases >> Remote MySQL). localhost
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
mysqldebug No Tweak Settings equivalent. 0
nobodyspam Mail Prevent “nobody” from sending mail 0
nocpbackuplogs No Tweak Settings equivalent. This sets whether backups and log analysis run at the same time. You can modify this setting in WHM’s Statistics Software Configuration interface (WHM >> Home >> Server Configuration >> Statistics Software Configuration). 0
nosendlangupdates System Send language file changes to cPanel On
notify_expiring_certificates Notifications Send notifications when certificates approach expiry 1
numacctlist Display Number of accounts per page to display in “List Accounts”. 30
Note:
If this value contains all (case-insensitive) when your server validates the cpanel.config file, it will convert it to undef.
overwritecustomproxysubdomains Domains Overwrite custom A records used for service subdomains 0
overwritecustomsrvrecords Domains Overwrite custom SRV records used by Outlook AutoDiscover support 0
permit_appconfig_entries_without_acls Security This setting allows WHM applications and addons to execute even if an ACL list has not been defined. 0
permit_appconfig_entries_without_features Security This setting allows cPanel and Webmail applications and addons to execute even if a feature list has not been defined. 0
permit_unregistered_apps_as_reseller Security Allow apps that have not registered with AppConfig to be run when logged in as a reseller to WHM. 0
permit_unregistered_apps_as_root Security Allow apps that have not registered with AppConfig to be run when logged in as root or a reseller with the “all” ACL in WHM. 0
php_max_execution_time PHP cPanel PHP max execution time 90
php_post_max_size PHP cPanel PHP max POST size 55
php_system_default_version No Tweak Settings equivalent. This sets the system’s default version of PHP. You can change this value in WHM’s MultiPHP Manager interface (WHM >> Home >> Software >> MultiPHP Manager). ea-php56
php_upload_max_filesize PHP cPanel PHP max upload size 50
phploader PHP cPanel PHP loader ”” (an empty string)
phpopenbasedirhome No Tweak Settings equivalent. This setting enables or disables the open_basedir tweak. You can change this value in WHM’s MultiPHP INI Editor interface (WHM >> Home >> Software >> MultiPHP INI Editor). 0
pma_disableis Software Enable phpMyAdmin information schema searches 0
popbeforesmtp Mail Allow users to relay mail if they use an IP address through which someone has validated an IMAP or POP3 login within the last hour (Pop-before-SMTP) 0
popbeforesmtpsenders Mail Add X-PopBeforeSMTP header for mail sent via POP-before-SMTP 0
postgresdebug No Tweak Settings equivalent. 0
product No Tweak Settings equivalent. cPanel
proxysubdomains Domains Service subdomains 1
Warning:
This value is dynamic. You must perform additional steps to update it manually. We recommend only modifying this value in the interface.
proxysubdomainsfornewaccounts Domains Service subdomain creation 1
proxysubdomainsoverride Domains Service subdomain override 1
publichtmlsubsonly Domains Restrict document roots to public_html 0
query_apache_for_nobody_senders No Tweak Settings equivalent. This sets whether the system will try to find the real sender of messages that the nobody user sent. You can change this value via the Query Apache server status to determine the sender of email sent from processes running as nobody setting in WHM’s Exim Configuration Manager interface (WHM >> Home >> Service Configuration >> Exim Configuration Manager). 1
referrerblanksafety Security Blank referrer safety check 0
referrersafety Security Referrer safety check 0
remotewhmtimeout System Remote WHM timeout 35
repquota_timeout System Disk usage/quota bailout time 60
requiressl Security Require SSL 1
resetpass System Reset Password for cPanel accounts 1
resetpass_sub System Reset Password for cPanel Subaccounts 1
root No Tweak Settings equivalent. This sets the location of the cPanel & WHM root installation. /usr/local/cpanel
rotatelogs_size_threshhold_in_megabytes Stats and Logs Log rotation size threshold 300
roundcube_db No Tweak Settings equivalent. This sets the type of database that Roundcube uses. sqlite
rpmupdate_allow_kernel System Enable Linux kernel update during nightly maintenance Off
RS No Tweak Settings equivalent. This sets the cPanel interface theme. paper_lantern
SecurityPolicy::PasswordAge No Tweak Settings equivalent. This sets the maximum age, in days, of passwords on the server. You can change this value via the Password Age setting in WHM’s Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).
Note:
This setting may not appear in the cpanel.config file until you enable it in the interface.
0
SecurityPolicy::PasswordStrength No Tweak Settings equivalent. This sets the required password strength for passwords on the server. You can change this value via the Password Strength setting in WHM’s Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).
Note:
This setting may not appear in the cpanel.config file until you enable it in the interface.
0
SecurityPolicy::SourceIPCheck No Tweak Settings equivalent. This sets whether to allow unverified IP addresses to log in. You can change this value via the Limit logins to verified IP addresses. setting in WHM’s Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).
Note:
This setting may not appear in the cpanel.config file until you enable it in the interface.
0
SecurityPolicy::TwoFactorAuth No Tweak Settings equivalent. This sets whether the system requires Two-Factor Authentication. You can change this value via the Two-Factor Authentication setting in WHM’s Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).
Note:
This setting may not appear in the cpanel.config file until you enable it in the interface.
0
SecurityPolicy::dnsclustering No Tweak Settings equivalent. This sets whether to use your security settings for DNS clusters. You can change this value via the DNS Cluster Requests setting in WHM’s Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).
Note:
This setting may not appear in the cpanel.config file until you enable it in the interface.
0
SecurityPolicy::xml-api No Tweak Settings equivalent. This sets whether to use your security settings for API requests. You can change this value via the API requests setting in WHM’s Configure Security Policies interface (WHM >> Home >> Security Center >> Configure Security Policies).
Note:
This setting may not appear in the cpanel.config file until you enable it in the interface.
0
selfsigned_generation_for_bestavailable_ssl_install Security Generate a self signed SSL certificate if a CA signed certificate is not available when setting up new domains. 1
send_error_reports No Tweak Settings equivalent. 0
send_server_configuration No Tweak Settings equivalent. 0
send_server_usage No Tweak Settings equivalent. 0
server_locale System Server Locale en
show_reboot_banner Security Display a message to reboot the server after essential software updates. 1
showwhmbwusageinmegs Stats and Logs Show bandwidth usage in megabytes by default in WHM 0
signature_validation Security Signature validation on assets downloaded from cPanel & WHM mirrors. Release Keyring Only
skip_chkservd_recovery_notify System The option to enable or disable ChkServd recovery notifications. 0
skipanalog Stats Programs Enable Analog stats 0
skipapacheclientsoptimizer No Tweak Settings equivalent. 0
skipawstats Stats Programs Enable Awstats stats 0
skipboxcheck Notifications Enable mailbox usage warnings 1
skipboxtrapper Mail Enable BoxTrapper spam trap 0
skipbwlimitcheck Notifications Bandwidth limit check 0
skipchkservd No Tweak Settings equivalent. This sets whether to monitor the chkservd service. You can change this value via the ChkServd setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skipcpbandwd No Tweak Settings equivalent. This sets whether to monitor bandwidth. You can change this value via the cPBandwd setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skipdiskcheck Notifications Disk quota usage warnings 0
skipdiskusage Notifications System disk space usage warnings 0
skipeximstats No Tweak Settings equivalent. This sets whether to monitor mail services. You can change this value via the Eximstats setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skiphorde Mail Enable Horde Webmail
Note:
This setting does not uninstall Horde.
0
skiphttpauth No Tweak Settings equivalent. 1
skipjailmanager No Tweak Settings equivalent. This sets whether to monitor jailed shells. You can change this value via the JailManager setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skipmailauthoptimizer No Tweak Settings equivalent. You can change this value via the MailAuthOptimizer setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skipmailman Mail Enable Mailman mailing lists 0
skipmodseclog No Tweak Settings equivalent. This sets whether to monitor IP addresses for IMAP and POP3 sessions. You can change this value via the RecentAuthedMailIp setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skipoomcheck Notifications Out of memory warnings. 0
skipnotifyacctbackupfailure System Send a notification when a user’s backup has errors 0
skipparentcheck System Allow other applications to run the cPanel and admin binaries 0
skiprecentauthedmailiptracker No Tweak Settings equivalent. This sets whether to monitor ModSecurity logs. You can change this value via the ModSecLog setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skiproundcube Mail Enable Roundcube webmail 0
skipspamassassin Mail Enable Apache SpamAssassin™ spam filter 0
skipspambox Mail Enable Apache SpamAssassin™ Spam Box delivery for messages marked as spam (user configurable). 0
skiptailwatchd No Tweak Settings equivalent. This sets whether to monitor the tailwatchd service. You can change this value via the tailwatchd setting in WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager). 0
skipwebalizer Stats Programs Enable Webalizer stats 0
smtpmailgidonly Mail Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak) 1
ssh_host_key_checking Security Enable strict SSH host key checking 0
statsloglevel Stats and Logs Stats log level 1
stats_log No Tweak Settings equivalent. This setting specifies the location of the stats_log file. /usr/local/cpanel/logs/stats_log
statthreshhold No Tweak Settings equivalent. This sets the minimum amount of disk space to process statistics.
Note:
If an account doesn’t meet this minimum, the system doesn’t process statistics for it.
256
system_diskusage_critical_percent Notifications Account system disk usage “critical” percentage 92.55
system_diskusage_warn_percent Notifications Account system disk usage “warn” percentage 82.55
tcp_check_failure_threshold System ChkServd TCP check failure threshold 3
Note:
If this value is 0 when your server validates the cpanel.config file, the system converts it to undef.
transfers_timeout System Number of seconds an SSH connection related to an account transfer may be inactive before timing out 1800
tweak_unset_vars No Tweak Settings equivalent. This sets which items display warning icons in WHM’s Tweak Settings interface (WHM >> Home >> Server Configuration >> Tweak Settings). No default value.
Note:
The system only uses this value internally.
upcp_log_retention_days Stats and Logs Number of days to retain upcp logs before purging them 45
update_log_analysis_retention_length Support Update analysis retention interval 90
use_apache_md5_for_htaccess Security Use MD5 passwords with Apache 1
use_information_schema SQL Use INFORMATION_SCHEMA to acquire MySQL disk usage (MySQL 5+ required) 1
useauthnameservers Domains Always use authoritative (registered) nameservers when creating a new DNS zone. 0
usemailformailmanurl Mail Prefix “mail.” onto Mailman URLs 0
usemysqloldpass SQL Use pre-4.1-style MySQL® passwords 0
userdirprotect No Tweak Settings equivalent. This setting enables or disables the mod_userdir tweak. You can change this setting in WHM’s Apache mod_userdir Tweak interface (WHM >> Home >> Security Center >> Apache mod_userdir Tweak). 1
verify_3rdparty_cpaddons Security Verify signatures of 3rdparty cPaddons. 0
version No Tweak Settings equivalent. 3.4
VFILTERDIR No Tweak Settings equivalent. This sets the location of the Exim email filter storage directory. /etc/vfilters
xframecpsrvd Security Use X-Frame-Options and X-Content-Type-Options headers with cpsrvd 1

Additional Documentation