Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
136
CentOS-WebPanel Bugs / Re: Text editor in File Manager
« on: May 14, 2025, 09:51:15 PM »
YES! I really have liked Sublime when I have used it. (And nano and sometimes vim on the servers themselves...)
137
SSL / Re: Probelm with renewing SSL certs
« on: May 14, 2025, 09:49:28 PM »
Read and follow certbot's documentation. https://certbot.eff.org/instructions?ws=apache&os=snap
You should run certbot from the CLI manually once to set it up, then edit the config to switch to DNS mode.
You should run certbot from the CLI manually once to set it up, then edit the config to switch to DNS mode.
Code: [Select]
sudo certbot --apacheMy example was specifically for Cloudflare, so you may have to adapt it to your situation.138
CentOS-WebPanel Bugs / Re: Text editor in File Manager
« on: May 14, 2025, 07:46:58 PM »
I use either VSCodium or Textadept, generally. They tend to behave fairly well! (And my complete text editor collection, that's a different story!)
139
Information / Re: Well, it's happened... RHEL 10 has been released...
« on: May 14, 2025, 07:44:30 PM »
How about after they certify CWP for EL9 first? Let's get that thing out of beta already!
140
SSL / Re: Probelm with renewing SSL certs
« on: May 14, 2025, 06:42:56 PM »
Use certbot (an ACME client) and run with a configuration like this (obtaining an API key from your DNS provider -- Cloudflare, in this example):
/etc/letsencrypt/renewal/yourdomain.com.conf
/etc/letsencrypt/renewal/yourdomain.com.conf
Code: [Select]
# renew_before_expiry = 30 days
version = 1.8.0
archive_dir = /etc/letsencrypt/archive/yourdomain.com
cert = /etc/letsencrypt/live/yourdomain.com/cert.pem
privkey = /etc/letsencrypt/live/yourdomain.com/privkey.pem
chain = /etc/letsencrypt/live/yourdomain.com/chain.pem
fullchain = /etc/letsencrypt/live/yourdomain.com/fullchain.pem
# Options used in the renewal process
[renewalparams]
account = YOURAPIKEYHERE
authenticator = dns-cloudflare
dns_cloudflare_propagation_seconds = 60
dns_cloudflare_credentials = /some/path/conf/yourdomain.com.key
server = https://acme-v02.api.letsencrypt.org/directoryThen you just call certbot renew in cron and it will renew your SSL cert 30 days before expiry.141
How to / Re: [Request] How to Setup whmcs Cronjob in CWP crontab?
« on: May 14, 2025, 02:22:11 PM »
If you need a more modern version of PHP (e.g. 8.3) for your cron jobs, Starburst has a guide for building it with IonCube support here:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/ioncube-error-after-building-php-8-3-with-cwp-on-almalinux-8-9/
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/ioncube-error-after-building-php-8-3-with-cwp-on-almalinux-8-9/
142
CentOS-WebPanel GUI / Re: NetworkManager errors / warnings
« on: May 13, 2025, 05:31:09 PM »
By default Apache will listen both on IPv6 and IPv4, as defined by the Listen directive:
Code: [Select]
Listen 80If you want to restrict it to listen on IPv4 only, change the setting to:Code: [Select]
Listen 0.0.0.0:80Repeat for port 443 to stop Apache from listening for HTTPS connections on IPv6:Code: [Select]
Listen 0.0.0.0:443
143
CentOS-WebPanel Bugs / Re: Text editor in File Manager
« on: May 13, 2025, 05:25:25 PM »
Thanks for the head's up!
144
SSL / Re: Probelm with renewing SSL certs
« on: May 13, 2025, 12:24:41 AM »
Is your firewall allowing in & outbound port 80? Is iptables configured similarly to this:
Code: [Select]
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPTYou could temporarily disable the CSF firewall (csf -x) and test a renewal, either from the CWP web GUI or via Netino's script. This would tell you if it is a firewall problem, which it would appear to be.
145
CentOS-WebPanel Bugs / Re: Firewall manager Disabled Bug
« on: May 10, 2025, 05:27:04 PM »
Yes, a known bug -- if you disable or restart the firewall via the CLI, the web GUI gets out of sync with its actual state. In other words, the devs need to test if it's running and display its actual current state.
146
E-Mail / Re: ClamAV Failed
« on: May 08, 2025, 01:49:28 PM »
Looks like you have some fundamentals to set up with DNS. Choose where you want to manage your DNS -- CWP? Contabo? A DDoS resilient provider like Cloudflare? You'll need some glue records and all the basic records in place (also DKIM and SPF). At least you have a PTR record (reverse DNS) in place for your IP address, provided by Contabo.
147
Installation / Re: install in centos 9
« on: May 08, 2025, 02:59:32 AM »
CentOS 9 Stream is not recommended as the foundation for a stable production server. Stream is a rolling release, beta-quality OS. Look to AlmaLinux 9 if you need a good EL9 server foundation.
148
Aplications / Re: 2fa not working
« on: May 04, 2025, 02:45:29 AM »
Not sure if rcschaff's CWP module from 2020 still works:
https://forum.centos-webpanel.com/new-modules/module-cwp_2fa/
https://github.com/rcschaff82/cwp_2fa
https://forum.centos-webpanel.com/new-modules/module-cwp_2fa/
https://github.com/rcschaff82/cwp_2fa
149
Suggestions / Re: pause a domain
« on: May 02, 2025, 09:26:34 PM »
Only chance of getting their ear is to submit something via the contact form:
https://control-webpanel.com/contact
https://control-webpanel.com/contact
150
E-Mail / Re: SpamHause x SpamAssassin
« on: May 01, 2025, 05:13:20 PM »
SpamAssassin is a locally-run spam filter that processes, scores, and can act (tag, move to another mailbox, delete) on incoming mail.
Spamhaus is a remote, cloud run RBL (real-time blacklist) that you can integrate in your mail delivery chain (SMTP server). Spamhaus requires a free API key to use it, so you must sign up for an account from them.
I use both in my servers since each serves an important part of the anti-UCE battle. (On another dedicated mail server, I employ ASSP -- Anti-Spam SMTP Proxy and it blocks 75% of incoming non-local mail; highly effective!)
Spamhaus is a remote, cloud run RBL (real-time blacklist) that you can integrate in your mail delivery chain (SMTP server). Spamhaus requires a free API key to use it, so you must sign up for an account from them.
I use both in my servers since each serves an important part of the anti-UCE battle. (On another dedicated mail server, I employ ASSP -- Anti-Spam SMTP Proxy and it blocks 75% of incoming non-local mail; highly effective!)
