Best practices for securing, tuning, and optimizing your LumaDock VPS after a successful cPanel installation.
1) Update License & Verify Installation
/usr/local/cpanel/cpkeyclt
Forces a license check. Make sure your VPS public IP is licensed with cPanel.
2) Enable Automatic Updates
In WHM → Update Preferences, set:
- cPanel & WHM → Release tier: Stable (recommended)
- Enable automatic updates for OS packages (dnf/apt)
3) Configure EasyApache 4
Go to WHM → EasyApache 4 to:
- Install multiple PHP versions (e.g. 7.4, 8.1, 8.2)
- Enable extensions:
opcache
,imagick
,intl
,zip
- Switch from CGI to PHP-FPM for performance
4) DNS & Nameservers
- In WHM → Basic WebHost Manager Setup, set
ns1.example.com
,ns2.example.com
. - Add matching
A
records in WHM and at your registrar. - If you don’t want to run your own nameservers, use your registrar’s DNS and just point A/CNAME/MX records to your VPS.
5) Email Deliverability
- Set PTR (reverse DNS) for your server IP via the LumaDock client area ticket.
- Enable SPF/DKIM in WHM → Email Deliverability.
- Optional: Configure DMARC with a TXT record:
_dmarc.example.com TXT v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com
- If port 25 is restricted, configure a relay (Amazon SES, Mailgun, etc.).