Search Our Database

How to Import Public Key(s) for the Cloud Server in Customer Portal

Introduction Importing public keys is a fundamental security practice for managing cloud instances and accessing virtual infrastructure. Public keys enable secure, passwordless authentication when connecting to cloud servers, eliminating the need to rely on traditional password-based logins. The Customer Portal provides a streamlined interface to manage these cryptographic keys without requiring technical support. This guide

How to Generate and Use API Tokens in WHM

Introduction API tokens in WHM provide a secure and efficient way to authenticate API requests without relying on the root password. These tokens serve as credentials that grant controlled access to WHM’s API, allowing system administrators, developers, and automation tools to perform a wide range of administrative tasks programmatically. Using API tokens instead of traditional

Introduction to the cPanel API

Introduction The cPanel API is a comprehensive interface that allows developers, system administrators, and hosting providers to programmatically interact with cPanel and WHM services. It enables automation of administrative tasks such as creating email accounts, managing DNS records, provisioning domains, and performing system-level operations without manually accessing the graphical user interface. cPanel offers three primary

Securing phpMyAdmin in DirectAdmin

Introduction This guide explains how to properly secure Directadmin phpMyAdmin in your Novacloud instance, covering access control, authentication, IP restrictions, and integration with DirectAdmin’s SSO session.   In a standard DirectAdmin environment, phpMyAdmin is accessible via https://domain.com/phpmyadmin or https://domain.com/pma. While this makes database management easy for users, it also poses a major security risk if left

Enabling and Enforcing Two-Factor Authentication (2FA) in DirectAdmin (GUI)

Introduction This guide explains how to enable and configure Two-Factor Authentication (2FA) in DirectAdmin (Evolution Skin) for Admin.   Enabling 2FA is a critical step in reducing account takeover risks, especially in legacy environments where users may still rely solely on username and password login. Legacy systems lacking additional authentication mechanisms are increasingly vulnerable to

Performing Routine Maintenance – System Updates and DirectAdmin Software Update

Introduction This guide explains the step to secure your server in your Novacloud instance by updating your server’s operating system packages and Directadmin Software components.   Performing regular updates ensures improved performance, enhanced security, and compatibility with the latest features and services. This process is especially important for ensuring stability in hosting environments.   Keeping both

Securing Web Traffic using Modsecurity and Cloudflare

Introduction This guide explains how to secure your website in your Novacloud instance by adding Modsecurity (Layer 7 WAF) alongside Cloudflare (WAF + CDN).   Traditional Firewall operate at layer 3 / 4 (IP / Port), block traffic based on source IP, port or protocol. Modsecurity operate at layer 7 (Application), inspects HTTP requests to detect

How to Safely Migrate from iptables-legacy to nftables

Introduction Linux firewall management has evolved significantly over the years, with iptables being the traditional standard for configuring packet filtering rules. However, with the introduction of the nftables framework in Linux kernel 3.13 and beyond, a more modern and efficient alternative is now available. As of recent Linux distributions—such as Debian 10+, Ubuntu 20.04+, and CentOS/RHEL