WHM CPanel Expert-WHM/cPanel AI Assistant

Example

Provision a fresh AlmaLinux 8/9 VM, install cPanel & WHM, apply baseline security.

Scenario

Step 1: Provision VM with recommended specs (CPU/RAM/disk). Step 2: Set hostname (hostnamectl set-hostname host.example.com) and configure reverse DNS with provider. Step 3: Run cPanel installer, then in WHM: configure 'Tweak Settings', enable cPHulk, enable AutoSSL (Let's Encrypt), install CSF firewall and set default rules, disable root SSH password auth and create sudo user with key-based auth. The result is a production-ready server with an auditable hardened baseline.

Example

Create, suspend, upgrade, or terminate cPanel accounts and manage resource quotas.

Scenario

Create a new account for client example.com via WHM -> Create a New Account: set package (5GB disk, 50GB bandwidth), enable email and FTP, set PHP version via MultiPHP Manager. To suspend a compromised account, use WHM -> Modify an Account -> Suspend, record reason in ticketing system, then run malware scan and restore from a clean backup when cleared.

Example

Create tiered hosting packages and a reseller with feature limitations.

Scenario

Define packages (small/medium/large) with disk, bandwidth, SQL, email limits. Create reseller 'agencyX' and allocate resource limits; customize feature lists to prevent access to WHM-level features. Integrate with WHMCS so when agencyX sells a plan, accounts are auto-provisioned using API tokens and predefined packages.

Example

Set up a DNS cluster for redundancy and implement DNSSEC.

Scenario

Configure WHM DNS cluster by exchanging cluster tokens between nodes, choose master/slave zones, and enable DNSSEC templates for zones. Use zone templates to enforce consistent SPF and DMARC records across all domains. For migration, lower TTLs to 300s 48 hours prior to change, then increase after propagation.

Example

Install and configure ModSecurity, cPHulk, CSF, Imunify360 or ClamAV, and enforce 2FA for cPanel/WHM.

Scenario

Enable ModSecurity with the OWASP CRS, tune false positives, enable cPHulk brute-force protection, lock down SSH (nonstandard port, keys only), set up 2FA for cPanel users, and schedule daily malware scans. When a malware incident appears, isolate the account, scan with Imunify/ClamAV, restore clean files from backup, and rotate credentials.

Example

Improve throughput for a WordPress-heavy host using PHP-FPM, OPcache, Redis, and MySQL tuning.

Scenario

Identify slow sites via Munin/Netdata. Move PHP to PHP-FPM with per-user pools and tuned process limits, enable OPcache and configure appropriate memory and max_accelerated_files, add Redis or Memcached for object caching, and modify my.cnf (InnoDB buffer pool size, query_cache disabled or tuned) to match available RAM. After tuning, run load tests to verify improved response times and adjust settings.

Example

Set up incremental daily backups to S3 and weekly full backups with restore testing.

Scenario

Configure WHM Backup -> Configure -> Enable backups with incremental mode; add an S3-compatible destination (credentials and bucket), set retention policies (30 daily, 12 weekly), and implement automated restore verification: weekly test-restore a sample account to a staging server to ensure backup integrity. Document RTO/RPO for stakeholders and maintain runbooks for full-site recovery.

Example

Deploy AutoSSL across accounts, install wildcard certs for control panels, and configure SPF/DKIM/DMARC to reduce bounces.

Scenario

Enable AutoSSL (cPanel’s provider or Let’s Encrypt). For panel access, install a wildcard or provider-issued cert. For each domain, ensure DKIM is enabled via cPanel -> Email Deliverability and add SPF records; set up a DMARC policy and monitor reports. Troubleshoot deliverability by checking PTR records, monitoring mail queues (exim -bp), and cleaning blacklists if necessary.

Example

Use WHM Transfer Tool to migrate 200 cPanel accounts from an old server to new hardware with minimal downtime.

Scenario

Preflight checks: disk space, inode counts, PHP/MySQL versions, disabled features. Reduce DNS TTL 48–72 hours before migration. Use Transfer Tool in batches with parallel transfers (10–20 at a time depending on IO), monitor transfer logs, sync mail queues and databases with rsync/Percona/XtraBackup for large DBs, re-point DNS once verified, and keep old server online with redirects for a fallback period.

Example

Set up Nagios/Prometheus alerts for disk, CPU, load, and failed backups; use Munin/Netdata for historic trends.

Scenario

Install and configure monitoring agent to send metrics to the central monitoring stack. Create alert rules: disk > 80%, load avg > (2*CPU cores), failed backup count > 0. Configure email/SMS/Slack notifications and escalate via runbook steps for on-call. Analyze logs (exim_mainlog, /var/log/messages, cpanel error logs) to find root causes when alerts fire.

Example

Automate account provisioning and DNS updates via cPanel & WHM API tokens and WHMCS integration.

Scenario

Generate a WHM API token for an automation user. Use WHM API 1/2 or UAPI endpoints to create accounts, manage packages, and update DNS records. Implement idempotent scripts (Python/bash) to reconcile server state nightly (e.g., ensure backups enabled, ensure AutoSSL is valid). Integrate with ticketing and billing tools so account creation triggers SMTP credentials and welcome emails automatically.

Example

Diagnose intermittent high load caused by runaway PHP processes and nail the offending site.

Scenario

Use top/htop to identify CPU hogs, lsof to find open files, and strace on the process if safe. Check access/error logs for traffic spikes or attack patterns, use mod_status or PHP-FPM slowlog to pinpoint slow scripts, temporarily throttle or disable offending site, then apply long-term fixes (caching, code optimization, WAF rules). Document findings and patch the cause.

Example

Create an auditable change log and baseline configuration for PCI or internal security review.

Scenario

Maintain change logs for package upgrades, firewall rules, and user access. Produce periodic configuration snapshots (output of yum/dpkg lists, /etc/php.ini, my.cnf, firewall rules), retain backups for required retention windows, and provide documentation and evidence for auditors including restore tests, backup logs, and security scan summaries.