name: apache.block10
default: true
info: Disable or enable HTTP/1.0 access
settings:

  • true
  • false

name: apache.brotli
default: false
info: Disable or enable Brotli output compression
settings:

  • true
  • false

name: apache.cache
default: disk
info: Change upstream HTTP caching method
settings:

  • memory
  • disk
  • memory+disk
  • false

name: apache.cachetype
default: explicit
info: Change upstream HTTP caching strategy
settings:

  • implicit
  • explicit

name: apache.dav
default: false
info: Enable DAV via HTTP
settings:

  • true
  • false

name: apache.evasive
default: mixed
info: General mod_evasive configuration
settings: string

name: apache.evasive-static-bypass
default: false
info: Ignore mod_evasive counters for static resources
settings: bool

name: apache.evasive-whitelist
default: 127.0.0.1
info: Add whitelist to mod_evasive
settings: string

name: apache.evasive-wordpress-filter
default: false
info: Apply strict mod_evasive counters on protected WordPress resources
settings: bool

name: apache.php-multi
default:
'7.2': system
info: Add native PHP builds
settings: string|array

name: apache.php-version
default: '7.4'
info: Change system-wide PHP version
settings: string

name: apache.ports
default:

  • 80
  • 443 info: Set Apache ports
    settings: array

name: apache.strict-directives
default: true
info: Encountering an unknown directive results in a fatal error
settings:

  • true
  • false

name: apache.system-directive
default: ''
info: Set Apache directive (-DNAME)
settings: string

name: argos.auth
default: []
info: Set Argos backend credentials
settings: string|array

name: argos.backend
default: pushover
info: Change standard Argos notification relay
settings: null

name: argos.backend-high
default: pushover
info: Change high priority Argos notification relay
settings: null

name: argos.backends
default:

  • default
  • high info: View Argos backends
    settings: null

name: argos.config
default: mixed
info: Set an Argos directive. Provide backend or "" to apply to all backends
settings: mixed

name: argos.init
default: false
info: Initialize Argos configuration
settings: boolean

name: argos.test
default:

  • Test message from Argos
  • default info: Relay a test message through optionally named backend
    settings: string ?string

name: cp.api
default: true
info: Toggle apnscp SOAP API
settings: bool

name: cp.bootstrapper
default: mixed
info: Set Bootstrapper parameter
settings: mixed

name: cp.config
default: []
info: Manipulate config.ini directly
settings: array

name: cp.debug
default: false
info: Toggle apnscp debug mode
settings: bool

name: cp.flare-check
default: 'true'
info: Enable periodic emergency update checks
settings:

  • bool

name: cp.headless
default: false
info: Disable apnscp frontend
settings: bool

name: cp.license-renew
default: null
info: Get license days-until-expire or force renewal of license
settings: int

name: cp.low-memory
default: false
info: Enable low memory mode for miserly installs
settings: bool

name: cp.nightly-updates
default: false
info: Enable apnscp automatic updates
settings: bool

name: cp.restart
default: false
info: Restart apnscp
settings: bool

name: cp.update-policy
default: major
info: apnscp update policy
settings:

  • edge
  • minor
  • major
  • all
  • false

name: cp.update-schedule
default: system
info: Set cp update window
settings:

  • system
  • 'null'
  • calendar spec

name: cp.workers
default:
max: 5
min: 1
start: 1
info: Configure apnscp backend workers
settings: array

name: cron.notify
default: root
info: Set notification email for nightly cron tasks
settings: string

name: cron.start-range
default: 3-22
info: 'Run cronjobs during these hours. Current time: 17:37 EST

Hint: default timezone can be changed with system.timezone'
settings: int range

name: dns.default-provider
default: builtin
info: Default DNS provider assigned to accounts
settings: string

name: dns.default-provider-key
default: ''
info: Default DNS provider authentication token
settings: string

name: dns.ip4-pool
default:

  • 136.37.24.241 info: Set Ip4 namebased pool
    settings: array

name: dns.ip4-proxy
default: null
info: Set public IP address. See docs/NAT.md
settings: string

name: dns.ip6-pool
default:

  • 2001:48f8:9021:f2d:825:ccf1:8013:b6ab info: Set Ip6 namebased pool
    settings: array

name: dns.ip6-proxy
default: null
info: Set public IP address. See docs/NAT.md
settings: string

name: fs.tmp-mount
default:
attrs: mode=1777,strictatime,nosuid,nodev,noexec,noatime,nr_inodes=5000000,size=3789M
inodes: 5000000
size: 3789
info: Set /tmp mount parameters
settings: array

name: ftp.enabled
default: true
info: Enable FTP on server
settings: bool

name: mail.enabled
default: true
info: Enable mail reception on server
settings: bool

name: mail.smart-host
default: false
info: Set next hop for all outbound email
settings: bool|hostname username password

name: mail.spam-filter
default: spamassassin
info: Mail spam filter
settings:

  • spamassassin
  • rspamd
  • false

name: net.hostname
default: testing.apisnetworks.com
info: Change system hostname
settings: string

name: net.nameservers
default:

  • 1.0.0.1
  • 1.1.1.1 info: Get nameservers for server
    settings: array

name: net.ssl
default: testing.apisnetworks.com
info: Request SSL certificates for the following hosts
settings: string|array

name: opcenter.account-cleanup
default: true
info: Periodically clean-up accounts on the server
settings: string|false

name: rampart.blacklist
default: ''
info: Temporarily blacklist an IP address in Rampart
settings: string

name: rampart.fail2ban-whitelist
default: 127.0.0.1/8
info: Whitelist an IP address from Rampart
settings: string

name: rampart.whitelist
default: 127.0.0.1/8
info: Whitelist an IP address from Rampart brute-force detection
settings: string

name: ssl.debug
default: false
info: Toggle Let's Encrypt debug mode
settings: bool

name: ssl.request
default: testing.apisnetworks.com
info: Request SSL certificates for the following hosts
settings: string|array

name: system.integrity-check
default: false
info: Run a thorough platform integrity check
settings: bool

name: system.kernel
default: system
info: Change default kernel
settings:

  • system
  • experimental
  • stable

name: system.monthly-integrity-check
default: true
info: Perform a full platform integrity check every month
settings: bool

name: system.sshd-port
default: 22
info: Set SSH ports
settings: int|array

name: system.sshd-pubkey-only
default: false
info: Restrict SSH access to public key
settings: bool

name: system.timezone
default: America/New_York
info: Change system timezone
settings: Any timezone

name: system.update-policy
default: default
info: Yum update policy
settings:

  • default
  • security
  • security-severity
  • minimal
  • minimal-security
  • minimal-security-severity
  • false

name: system.virus-scanner
default: clamav
info: Set system AV scanner
settings: string

name: system.watchdog-load
default: 50
info: Set watchdog load threshold
settings: int > 0