Automated, robust, and highly secure deployment script to install and configure cPanel/WHM along with essential server plugins like LiteSpeed, CloudLinux, and JetBackup 5. Designed to save significant time and ensure standard security baselines when provisioning new cPanel production servers.
Coded and developed by nx.lc & Bluedot Team
Simply execute the following command as the root user on a fresh operating system:
curl -Ls https://raw.githubusercontent.com/ismailh/CpanelWHM-PreConfig/refs/heads/main/2026nx.lc.sh | bash Note: You will be prompted to enter a secret authorization phrase to execute the deployment.
During the second run, the script now offers an interactive menu allowing you to run all steps sequentially or start from a specific phase (e.g., cPanel Installation, CSF Config, WHM Tweaks, Plugins, or PHP Setup).
If you need to uninstall any of the plugins added by this script, you can run the standalone master uninstaller:
curl -Ls https://raw.githubusercontent.com/ismailh/CpanelWHM-PreConfig/refs/heads/main/uninstall_plugins.sh | bash- Custom SSH Port: Interactive prompt (defaults to
22, allows custom port, or keeps existing changed port; additionally enables port1337as a fallback to prevent lockouts; both instantly whitelisted in firewalls/CSF; Root login allowed with Password Auth enabled) - Firewall: IPTables / Firewalld replaced natively with CSF (ConfigServer Security & Firewall).
- Kernel Tuning: Sysctl optimizations for network performance, swap reduced to 10.
- Service Optimization: Stops and disables unused background services (telnet, rsh, rlogin, rexec, finger, talk, ntalk, rpcbind).
- CloudLinux Symlink Protection: Configured with
fs.enforce_symlinksifownerviasysctldynamically based on the nobody user group (if CloudLinux is installed). - Compiler Access: Completely restricted for security (
compilers off). - Protection: Shell Fork Bomb Protection enabled by default.
Hardware Support:
- Fully supports VPS (Virtual Private Servers)
- Fully supports Dedicated Servers / Bare Metal
Operating Systems (64-bit):
- Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS
- Debian 11 / 12
- AlmaLinux 8.x / 9.x
- Rocky Linux 8.x / 9.x
- CentOS 7 / CentOS Stream 8 & 9
- CloudLinux 8 / 9
During the setup, the script intelligently asks if you'd like to install the following tools, fully configuring them to work together without conflicts:
- LiteSpeed Web Server (Trial or Custom Serial)
- CloudLinux OS (License Activation Supported)
- CloudLinux CageFS (Automated setup & mount/unmount logic)
- JetBackup 5 (Stable/Edge branch selection)
- Imunify360 (Full, ImunifyAV+, or Free)
- Softaculous
- WP Toolkit
- ConfigServer Mail Queues (CMQ)
- ConfigServer ModSecurity Control (CMC)
- Account DNS Check
- CleanBackups
- WatchMySQL
- IMH Performance Tuner (Analyzes server resource usage & recommends Apache/PHP-FPM tuning)
- IMH Backup Disk Usage (Monitors and graphs /backup disk space by type/date)
- IMH Snap Stat
- IMH PHP Extension
- IMH Rector Wrapper
- IMH Email Solutions
- **MailBaby ** (Automated Exim routing, multple domain selection, specific domain routing, and plaintext terminal password entry)
- Redis & Memcached (Object Caching Daemons + EA4 PHP Extensions for all versions 7.2–8.5)
- cPanel Security Alerts To Telegram (CSF & WHM Contact Manager Integration)
- Default Installation: MariaDB 11.4
If installed via the script fallback, the LiteSpeed WebAdmin is deployed with the following credentials:
- User:
admin - Pass: (Randomly generated 12-character secure password)
The script features a highly flexible, interactive PHP installer. You can choose to install the full suite or exclusively target modern environments.
Installation Options:
- Custom Selection: Type specific versions separated by space (e.g.,
80 81 84). - Keyword
all: Installs the full suite from7.2through8.5(default). - Keyword
8.x(Quick Preset): Installs only modern, high-performance versions (8.0to8.5).
All selected versions are provisioned via EasyApache 4 with the following comprehensive extension suite:
| Version | Status |
|---|---|
| PHP 7.2 | ✅ Installed |
| PHP 7.3 | ✅ Installed |
| PHP 7.4 | ✅ Installed |
| PHP 8.0 | ✅ Installed |
| PHP 8.1 | ✅ Installed |
| PHP 8.2 | ✅ Installed |
| PHP 8.3 | ✅ Installed |
| PHP 8.4 | ✅ Installed |
| PHP 8.5 | ✅ Installed (Default) |
⚠️ EOL versions 5.6, 7.0, 7.1 are flagged and optionally removed for security.
Extensions installed for every version:
| Category | Extensions |
|---|---|
| Core | php-cli, php-common, php-devel, pear, runtime |
| Database | php-mysqlnd, php-mysqli, php-pdo, php-sqlite3 |
| Caching | php-opcache, php-redis, php-apcu, php-memcached, php-igbinary |
| Image | php-gd, php-imagick |
| Network | php-curl, php-imap, php-sockets, php-ldap |
| String | php-mbstring, php-mbregex, php-iconv, php-gettext, php-intl |
| File | php-fileinfo, php-exif, php-ftp, php-zip, php-bz2 |
| Math | php-bcmath, php-gmp, php-sodium |
| XML | php-xml, php-xmlrpc, php-soap |
| Security | php-posix |
| Loaders | IonCube (per version), SourceGuardian |
| System | php-process, php-calendar |
| Type | php-ctype, php-tokenizer, php-json |
| Spell | php-pspell |
| Web | php-fpm, php-litespeed |
| Utilities | php-tidy, php-uuid, php-maxminddb |
IonCube Loader versions per PHP:
| PHP | IonCube Loader |
|---|---|
| 7.2, 7.3, 7.4 | ioncube10 |
| 8.1 | ioncube12 |
| 8.2 | ioncube13 |
| 8.3, 8.4 | ioncube14 |
| 8.5 | ioncube15 |
- memory_limit:
1024M - post_max_size:
100M - upload_max_filesize:
100M - max_execution_time:
200 - max_input_vars:
3000 - date.timezone:
UTC - expose_php:
Off - display_errors:
Off - disable_functions: 28 high-risk functions disabled (e.g.,
exec,shell_exec,system,passthru,popen,proc_open,eval).
- Background Process Killer enabled (BitchX, eggdrop, sniffers, etc.)
- Exim optimized (50MB message size limit, outbound spam detection)
- AutoSSL renewal & expiry notification spam disabled.
- Proxy Subdomains disabled.
If you encounter any issues or need further customization, please contact:
Email: ismail@bluedot.ltd
Website: https://me.ismail.info/
Website: https://nx.lc/
If this project saved you time, consider supporting the development:
