How to Use Server Profiles

Valid for versions 86 through the latest version

Version:

82

84

86


Last modified: January 14, 2020

Overview

In cPanel & WHM version 76, we introduced server profiles. Server profiles let you optimize servers to perform specific tasks or functions. A server profile enables and disables a set of roles. These roles allow or disallow certain services related to the server’s task.

For example, a server running the Mail Node profile disables most services unrelated to mail functions. A Mail Node server can then host accounts that do not require applications such as web hosting or database access.

Important:
  • Your cPanel & WHM license may determine your server’s profile. For more information, read the Profiles section of this documentation.

  • The dynamicui.conf files include the roles and services parameters to support server profiles in the UI. Do not modify these parameters in this file. We do not support this behavior.

  • You can purchase a cPanel Solo License for a server that uses any profile, but that server’s cPanel access only allows for one user.

  • The server profiles feature hides certain cPanel & WHM interfaces and blocks some associated API functions. However, this feature does not block the user’s ability to manually install software and provide certain functionality. We do not offer support if you circumvent the intended functionality. This behavior can cause unwanted results.

The Server Profiles interface

You can configure your server’s profile with WHM’s Server Profile interface (WHM >> Home >> Server Configuration >> Server Profile). For more information, read the Profiles section of this documentation.

Important:
  • We do not recommend using experimental profiles on production environments.
  • Linking two servers is experimental. We do not recommend linking for production environments.
  • For the development status of server profiles, read our Server Profiles Roadmap documentation.

Roles

Important:
  • If a role disables a service, the system disables the role’s related modules and functions.
  • If a server profile enables a service, the system will also enable service monitoring. To disable a service’s monitoring, use WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

Roles are a collection of one or more services. Profiles use roles to provide specific server functionality. A server profile may consist of one or more of the following roles:

  • Calendars and Contacts — Allows users to access CalDAV and CardDAV services and features.

    • Module Name — CalendarContact
    • Services — cpdavd
  • DNS — Allows users to create and edit Domain Name System (DNS) zone files.

    • Module Name — DNS
    • Services — bind, named, nsd, pdns, powerdns
      Important:
      • We deprecated the MyDNS and NSD nameserver software in cPanel & WHM version 78. We strongly recommend that you migrate to PowerDNS. For more information, read our cPanel Deprecation Plan.
      • This role does not convert your server to a cPanel DNSOnly™ server.
  • File Storage — Allows users to access cPanel’s File Manager and Git™ Version Control features.

    • Module Name — FileStorage
    • Services — There are currently no services associated with this role.
      Note:
      When a profile disables this role, you cannot enable the Shell Access setting when you create a new cPanel account.
  • FTP — Allows users to manage their account’s files with an FTP client.

    • Module Name — FTP
    • Services — ftpd, pureftp, proftpd
  • Local Mail — Allows the control of local mail delivery and related features.

    • Module Name — MailLocal
    • Services — exim, dovecot
  • MySQL/MariaDB — Allows users to create and manage MySQL® or MariaDB databases.

    • Module Name — MySQL
    • Services — mysql
  • PostgreSQL — Allows users to create and manage PostgreSQL databases, if cPanel manages the server’s PostgreSQL.

    • Module Name — Postgres
    • Services — postgresql
  • Receive Mail — Allows users to receive mail from external sources.

    • Module Name — MailReceive
    • Services — cpanel_dovecot_solr, cpdavd, cpgreylistd, dovecot, imap, mailman, pop
  • Relay Mail — Allows the server’s Message Transfer Agent (MTA) to forward mail from one remote host to another.

    • Module Name — MailRelay
    • Services — exim, exim-altport
  • Send Mail — Allows users to send mail externally and control the features necessary for sending mail.

    • Module Name — MailSend
    • Services — exim, exim-altport
  • Spam Filter — Allows users to use Apache SpamAssassin™ to identify, sort, and delete unsolicited mail.

    • Module Name — SpamFilter
    • Services — spamd
  • Webmail — Allows users to access webmail services and features.

    • Module Name — Webmail
    • Services — There are currently no services associated with this role.
  • Web Disk — Allows users to manage their account’s files with a WebDAV client.

    • Module Name — WebDisk
    • Services — cpdavd
  • Web Server — Allows users to create and manage websites for their domains.

    • Module Name — WebServer
    • Services — httpd
      Important:
      • When a profile disables this role, the cpsrvd daemon takes over service for the standard HTTP ports 80 and 443. This ensures that cPanel & WHM features that depend on these ports continue to function. For example, the AutoSSL, Mailman, and BoxTrapper features, as well as service subdomains, depend on these ports.
      • To prevent the cpsrvd daemon from serving ports 80 and 443, enable the Prevent cpsrvd from serving standard HTTP ports setting in WHM’s Tweak Settings interface (WHM >> Home >> Server Configuration >> Tweak Settings).
      • When a profile disables this role, you cannot enable the CGI Access setting when you create a new cPanel account.

Profiles

You can select from one of the following profiles:

This profile provides all services and has access to all cPanel features. This is the default server profile for a full cPanel & WHM license.

Roles

This profile provides all services and has access to all cPanel features.

Disabled services

This profile does not disable any cPanel services.

Note:

You can manage your services with WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

WHM features

This profile enables all WHM features.

cPanel features

This profile allows cPanel users access to all cPanel features.


This profile allows the system to serve Domain Name System (DNS) zones.

Important:
  • If you purchase a DNS Node license, the system defaults to this profile. You cannot select a different profile. You must upgrade to a full cPanel & WHM license to select a new profile.

  • Selecting this profile does not convert your server to a cPanel DNSOnly server.

Roles

This profile has the following role configuration:

Enabled roles
  • DNS
  • Local Mail
  • Send Mail
Disabled roles
  • Calendars and Contacts
  • File Storage
  • FTP
  • PostgreSQL
  • Receive Mail
  • Spam Filter
  • Web Disk
  • Webmail
  • Web Server
Optional roles
  • MySQL/MariaDB
  • Relay Mail

Disabled services

This profile disables the following services:

  • cpanel_dovecot_solr
  • cpdavd
  • cpgreylistd
  • ftpd
  • httpd
  • imap
  • mailman
  • mysql
  • pop
  • postgresql
  • proftpd
  • pureftp
  • spamd
Note:

You can manage your services with WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

WHM features

This profile disables the following features in the WHM interface:

Server Configuration
  • Statistics Software Configuration
Security Center
  • Apache mod_userdir Tweak
  • ModSecurity™ Configuration
  • ModSecurity™ Tools
  • ModSecurity™ Vendors
Service Configuration
  • Apache Configuration
  • cPanel Web Disk Configuration
  • Exim Configuration Manager
  • FTP Server Configuration
  • FTP Server Selection
  • Mailserver Configuration
Server Status
  • Apache Status
Account Information
  • List Subdomains
Account Functions
  • Raw Apache Log Download
  • Raw FTP Log Download
  • Web Template Editor
Transfers
  • Convert Addon Domain to Account
DNS Functions
  • Edit MX Entry
SQL Services
  • Additional MySQL Access Hosts
  • Change MySQL User Password
  • Database Map Tool
  • Manage Database Users
  • Manage Databases
  • MySQL Root Password
  • MySQL/MariaDB Upgrade
  • phpMyAdmin
  • Repair a MySQL Database
  • Show MySQL Processes
Software
  • EasyApache4
  • MultiPHP INI Editor
  • MultiPHP Manager
Email
  • Greylisting
  • Mailbox Conversion
  • Repair Mailbox Permissions
  • Spamd Startup Configuration
cPanel
  • Install cPAddons Site Software
  • Manage cPAddons Site Software
  • Reset a Mailman Password
Restart Services
  • FTP Server (ProFTPd/PureFTPd)
  • HTTP Server (Apache)
  • IMAP Server
  • Mailing List Manager (Mailman)
  • PHP-FPM service for Apache
  • SQL Server (MySQL) — This feature is unavailable if you disable the optional MySQL/MariaDB role.

cPanel features

This profile and the optional MySQL/MariaDB role allow cPanel users access to the following features:

Files
  • Backup — This profile limits functionality in this interface.
  • Backup Wizard — This profile disables this interface if you do not enable the optional MySQL/MariaDB role.
Databases
  • phpMyAdmin
  • MySQL Databases
  • MySQL Database Wizard
  • Remote MySQL
Domains
  • Domains
  • Zone Editor
Email
  • Email Routing
  • Email Deliverability
Metrics
  • This profile disables this menu.
Security
  • SSH Access
  • Manage API Tokens
Advanced
  • Track DNS
Preferences
  • Password & Security
  • Change Language
  • Change Style
  • Contact Information

This profile allows the system to serve mail. Certain cPanel & WHM features, such as AutoSSL and GNU Mailman, require HTTP service. On a Mail Node profile server, the system disables the web server, such as the httpd service, but enables the cpsrvd service to handle the TCP ports 80 and 443. This ensures that HTTP-dependent cPanel & WHM features continue to function.

Warning:

A standalone Mail Profile server is not experimental.

Warnings

A linked node is experimental. You must comply with the following instructions:

Synchronization

The following instructions apply to synchronization for linked mail nodes:

  • Do not make changes to userdata files on a linked node directly. We do not offer support if you make these changes. This behavior could cause the nodes to become out of sync.
  • You must manually update system settings on a linked node (for example, server or Exim configuration settings).
  • Account suspension on a worker node does not propagate to the controller node.
cPanel accounts

The following instructions apply to cPanel accounts for linked mail nodes:

Warning:
In cPanel & WHM version 86, role restrictions may allow access to restricted features in some contexts. We intend to remove this functionality in a future version.
  • Only new cPanel accounts can link to a mail capable server.
  • Do not update your node’s hostname after you link two nodes. This operation could corrupt the nodes’ ability to communicate.
  • If you manually edited your zone templates, you must update the mail CNAME record. For example, update:
    mail IN CNAME %domain%
    to:
    mail IN CNAME %maildomain%
cPanel account restoration

The following instructions apply to cPanel account restoration for linked mail nodes:

  • When you restore a cPanel account, the A records for service subdomains may be different than when you created the cPanel account. Compare the restored zone records to your current records to repair them manually.
  • You must perform backups for linked cPanel accounts on the controller node.
  • When you restore those accounts, the system will not restore the linkage.
  • Resellers must have root-level privileges to restore linked cPanel accounts.
  • If a non-root-level privilege reseller owns the cPanel account, the following steps occur:
    1. The cPanel account will restore to the local server.
    2. Ownership of the cPanel account will transfer to the root user.
Important:

A server that uses the Mail Node profile disables web hosting features.

Roles

This profile has the following role configuration:

Enabled roles
  • Calendars and Contacts
  • Local Mail
  • Receive Mail
  • Relay Mail
  • Send Mail
  • Webmail
Disabled roles
  • File Storage
  • FTP
  • PostgreSQL
  • Web Disk
  • Web Server
Optional roles
  • MySQL/MariaDB
  • DNS
  • Spam Filter

Disabled services

This profile disables the following services:

  • ftpd
  • httpd
  • mysql
  • postgresql
  • proftpd
  • pureftp
Note:

You can manage your services with WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

WHM features

This profile disables the following features in the WHM interface:

Server Configuration
  • Statistics Software Configuration
Security Center
  • Apache mod_userdir Tweak
  • Compiler Access
  • ModSecurity™ Configuration
  • ModSecurity™ Tools
  • ModSecurity™ Vendors
  • Shell Fork Bomb Protection
  • Traceroute Enable/Disable
Service Configuration
  • Apache Configuration
  • cPanel Web Disk Configuration
  • FTP Server Configuration
  • FTP Server Selection
  • Nameserver Selection — This feature is unavailable when you disable the optional DNS role.
  • Manage Service SSL Certificates
Clusters
  • DNS Cluster — This feature is unavailable when you disable the optional DNS role.
Server Status
  • Apache Status
Account Information
  • List Subdomains
Account Functions
  • Raw Apache Log Download
  • Raw FTP Log Download
  • Web Template Editor
DNS Functions
  • This menu is unavailable when you disable the optional DNS role.
SQL Services
  • This menu is unavailable.
Software
  • EasyApache4
  • MultiPHP INI Editor
  • MultiPHP Manager
cPanel
  • Install cPAddons Site Software
  • Manage cPAddons Site Software
Restart Services
  • DNS Server — This feature is unavailable when you disable the optional DNS role.
  • FTP Server (ProFTPd/PureFTPd)
  • HTTP Server (Apache)
  • PHP-FPM service for Apache
  • SQL Server (MySQL)
  • SQL Server (PgSQL)

cPanel features

This profile and its optional roles allow cPanel users access to the following features:

Files
  • Backup
  • Backup Wizard
Domains
  • Domains
  • Zone Editor
Email
  • Email Accounts
  • Forwarders
  • Email Routing
  • Autoresponders
  • Default Address
  • Mailing Lists
  • Track Delivery
  • Global Email Filters
  • Email Filters
  • Email Deliverability
  • Address Importer
  • Spam Filters
  • Encryption
  • BoxTrapper
  • Configure Greylisting
  • Calendars & Contacts
  • Email Disk Usage
Security
  • SSL/TLS
  • SSL/TLS Status
Advanced
  • Track DNS
Preferences
  • Password & Security
  • Change Language
  • Change Style
  • Contact Information

This profile allows the server to only serve databases.

Warning:

This profile is experimental, and we do not recommend it for production environments. For more information about the development status for experimental profiles, read our Server Profiles Roadmap documentation.

Roles

This profile has the following role configuration:

Enabled roles
  • MySQL/MariaDB
  • Local Mail
  • Send Mail
Disabled roles
  • Calendars and Contacts
  • DNS
  • File Storage
  • FTP
  • Receive Mail
  • Relay Mail
  • Spam Filter
  • Web Disk
  • Webmail
  • Web Server
Optional roles
  • PostgreSQL
Note:

You must install PostgreSQL to enable this optional role.

Disabled services

This profile disables the following services:

  • bind
  • cpanel_dovecot_solr
  • cpdavd
  • cpgreylistd
  • ftpd
  • httpd
  • imap
  • mailman
  • named
  • nsd
  • pdns
  • pop
  • powerdns
  • proftpd
  • pureftp
  • spamd
Note:

You can manage your services with WHM’s Service Manager interface (WHM >> Home >> Service Configuration >> Service Manager).

WHM features

This profile disables the following features in the WHM interface:

Server Configuration
  • Statistics Software Configuration
Security Center
  • Apache mod_userdir Tweak
  • ModSecurity™ Configuration
  • ModSecurity™ Tools
  • ModSecurity™ Vendors
Service Configuration
  • Apache Configuration
  • cPanel Web Disk Configuration
  • FTP Server Configuration
  • FTP Server Selection
  • Mailserver Configuration
  • Nameserver Selection
Clusters
  • DNS Cluster
Server Status
  • Apache Status
Account Information
  • List Subdomains
Account Functions
  • Raw Apache Log Download
  • Raw FTP Log Download
  • Web Template Editor
DNS Functions
  • This profile disables this menu.
Software
  • EasyApache4
  • MultiPHP INI Editor
  • MultiPHP Manager
Email
  • Greylisting
  • Mailbox Conversion
  • Repair Mailbox Permissions
  • Spamd Startup Configuration
cPanel
  • Install cPAddons Site Software
  • Manage cPAddons Site Software
  • Reset a Mailman Password
Restart Services
  • DNS Server
  • FTP Server (ProFTPd/PureFTPd)
  • HTTP Server (Apache)
  • IMAP Server
  • Mailing List Manager (Mailman)
  • PHP-FPM service for Apache

cPanel features

Note:

This list does not include the optional PostgreSQL role.

This profile allows cPanel users access to the following features:

Files
  • Backup — This profile limits functionality in this interface.
  • Backup Wizard
Databases
  • phpMyAdmin
  • MySQL Databases
  • MySQL Database Wizard
  • Remote MySQL
Email
  • Email Routing
  • Email Deliverability
Metrics
  • This profile disables this menu.
Security
  • SSH Access
  • Manage API Tokens
Advanced
  • Track DNS
Preferences
  • Password & Security
  • Change Language
  • Change Style
  • Contact Information

Additional Documentation