Skip to main content

Advanced post-install setup for cPanel/WHM

Secure, tune, and optimize your VPS after installing cPanel/WHM with these essential configuration steps.

Andy Wallace avatar
Written by Andy Wallace
Updated over a month ago

Once cPanel/WHM is installed on your LumaDock VPS, a few post-install tasks help secure the system, improve performance, and ensure proper email and DNS operation. The steps below cover the most important actions to take right after installation.


Update your license and verify installation

Run the cPanel license update command to confirm your public IPv4 is licensed correctly.

/usr/local/cpanel/cpkeyclt

If the license does not activate, make sure the server is using the correct public IP and retry the command.


Enable automatic updates

Keeping cPanel and the underlying OS updated is critical for stability and security.
In WHM → Update Preferences, set the following:

  • Choose the Stable release tier.

  • Enable automatic updates for system packages.

This ensures new patches, fixes, and security updates are applied without manual intervention.


Configure EasyApache 4

EasyApache 4 controls your Apache and PHP stack.
Open WHM → EasyApache 4 and adjust it to fit your workloads.



Recommended actions

  • Install multiple PHP versions so each account can use its own version.

  • Enable performance-friendly extensions such as opcache, imagick, intl, and zip.

  • Switch from CGI handlers to PHP-FPM for better speed and resource efficiency.

Set DNS and nameservers

Go to WHM → Basic WebHost Manager Setup and configure your nameservers, commonly:

ns1.example.com
ns2.example.com

Add A records for both nameservers in WHM, then create matching records at your domain registrar.

If you prefer not to run your own nameservers, use your registrar’s DNS instead and only add A, CNAME, and MX records pointing to your VPS.


Improve email deliverability

Correct DNS and security configuration is essential for email to reach inboxes reliably.



Set reverse DNS (PTR)

Request PTR setup from the LumaDock support team using your VPS public IP and hostname.



Enable SPF and DKIM

In WHM → Email Deliverability, enable or repair SPF and DKIM for each hosted domain.



Add a DMARC record (optional but recommended)

_dmarc.example.com  TXT  v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com



If port 25 is restricted

Configure an outbound mail relay such as Amazon SES or Mailgun.
This helps ensure your messages are accepted by major providers and bypasses any outbound restrictions.



These steps give you a secure, functional, and well-optimized foundation for hosting websites and email on your cPanel VPS.

Did this answer your question?