Server Operation

Apache is still serving the old certificate

invalid@example.com (Dennis_sp) — Tue, 21 Jul 2026 14:30:11 +0000

We are updating our certificates that we get from our CA. We then try to deploy the certificate using this code:

UPDATE_JSON="$("$JQ_BIN" -nc \
--arg sid "$SESSION_ID" \
--arg pid "$WEB_ID" \
--arg cert "$CERT_CONTENT" \
--arg key "$KEY_CONTENT" \
'{
session_id:$sid,
primary_id$pid|tonumber),
params:{
ssl:"y",
ssl_cert:$cert,
ssl_key:$key
}
}'
)"

UPDATE_RESP="$(
"$CURL_BIN" -sk -X POST...

Apache is still serving the old certificate

FTP server not listed anywhere in IspConfig after update

invalid@example.com (wilneh) — Sun, 05 Jul 2026 19:44:32 +0000

I noticed that pureftp service is not listed anywhere in ispconfig (server services, status of service), even though it is install and configured.
did something changed?

Cloud VPS MariaDB Database hacked

invalid@example.com (Sven Naujoks) — Sat, 04 Jul 2026 00:36:55 +0000

Hello All,
On the 17th December my MariaDB Database on my AlmaLinux, VERSION="9.7 (Moss Jungle Cat) has been removed.
The culprit left the following message inside the Database as a entry:

Dear Sir/Madam, We hope this message finds you well. We would like to let you know that we created a backup of your databases/tables (we keep them for 60 days and then permanently delete them). We offer you our recover service: if you want to recover your corrupted or incomplete databases/tables, simply...

Cloud VPS MariaDB Database hacked

API Keys/Proxy server and security

invalid@example.com (conductive) — Sun, 21 Jun 2026 01:55:32 +0000

I was attempting to configure a few apps with APIs. Unfortunately securely passing key with something like a .env variable is problematic from a security standpoint. It seems to me that perhaps using a proxy server to pass the keys might be a better idea. I am currently running a Debian NGINX ISPconfig server and was wondering what is the best way to handle API keys and how to do it. NGINX proxy? php proxy? and will this work on a basic ISPconfig site?

Thanks for you input

User FTP can't remove backup downloaded

invalid@example.com (rodinux) — Fri, 29 May 2026 05:32:00 +0000

If a user do manual backup from the interface and then download the backup, a copy of the backup which is first saved in the folder `/var/backup/webXX/manual_xxxx.gz` is made on the folder `/var/www/client/clientXX/webXX/backup/manual_xxxx.gz` and a user FTP can download it. But he can't remove it.

The client cannot remove a backup from the interface, he can remove a backup so the backup `/var/backup/webXX/manual_xxxx.gz` will be removed but it will not remove the one downloaded in...

User FTP can't remove backup downloaded

How to set document root path for Roundcube 1.7 when manually installed in ISPConfig 3 website

invalid@example.com (gdeputy) — Tue, 26 May 2026 07:26:49 +0000

I saw the stable release of roundcube 1.7 today, and tried to install it. Apparently they have changed their web structure, and require a /public_html folder be the root of the site, and then it references other files/folders that are above that root folder. This obviously does not work with ISPConfig, as it doesnt let you have 'custom' folders above /web. I tried using apache directives to override it to use /web/public_html as the root, but couldnt get that to work.
Its rather...

How to set document root path for Roundcube 1.7 when manually installed in ISPConfig 3 website

rspamd marks valid mails as spam. How to avoid that?

invalid@example.com (DrMartinus) — Wed, 20 May 2026 14:16:33 +0000

Since I cannot use my email client to "unspam" the mails that have been marked by rspamd as spam, I would like to create a whitelist for rspamd. When I search for it, I only get instructions on how to set up a whitelist filter. This looks for different criteria, which are not fulfilled by the senders (yet the mails are legitimate). I tried to "ham" the messages using the "Scan/Learn" section in the browser UI, but that doesn't seem to work either. The problem is anyway, that the message...

rspamd marks valid mails as spam. How to avoid that?

Website keeps disabling itself

invalid@example.com (Tomislav Aurednik) — Mon, 11 May 2026 07:01:33 +0000

Hi,
I have very strange case, at the first I was thinking there was intrusion, password leak or something similar. Now I finally found what is happening. This is ispconfig debug log

10.05.2026-17:29 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
10.05.2026-17:29 - DEBUG - Found 1 changes, starting update process.
10.05.2026-17:29 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event...

Website keeps disabling itself

Roundcube Update from 1.5.2 to 1.6.15

invalid@example.com (onastvar) — Sat, 09 May 2026 04:05:02 +0000

After recent Roundcube Update from 1.5.2 to 1.6.15 i see the following errors in

When accessing Roundcube via https://mydomain.com/webmail/
shows error message when trying to load some email messages:
Oops... something went wrong!
An internal error has occurred. Your request cannot be processed at this time.
For administrators: Please check the application and/or server error logs for more information.

MAIL ERROR LOG
dovecot: auth-worker(25324):...

Roundcube Update from 1.5.2 to 1.6.15

weird spam false spam marking by rspamd

invalid@example.com (Cristiangd.cl) — Thu, 02 Apr 2026 14:27:56 +0000

Hello ,
I have found a weird false spam designation by rspamd:
you csn find the lgo for that message below.
As i understand, rspamd is marking is detecting "cia.ltda" as an URL. Curiously the only part where that text is found is on a pdf attachment showing a company name:
CompanyName Cia. Ltda. = CompanyName LLC. = CompanyName GmbH.
Not an URL
Nor the sender ip or url are blacklisted.
Am i interpreting this correctly?
Can youy suggest a way to avoid this problem?
Thanks

The log for the...

weird spam false spam marking by rspamd

Strange DNS attack killing syslog

invalid@example.com (brainsys) — Sat, 14 Mar 2026 16:01:16 +0000

Debian 12 ISPConfig server

My syslog started growing at a spectacular rate in the past 5 days to a point is was filling the whole server disk. This is caused by millions of these type of entries:

Code:

2026-02-12T15:41:55.044210+00:00 v1 named[270743]: client @0x7fce9a3c6498 218.78.140.194#38011 (ofi.com): query (cache) 'ofi.com/ANY/IN' denied (allow-query-cache did not match)

The IP varies so trying to firewall it out is impossible. ofi.com is a Chinese domain and this is not it's...

Strange DNS attack killing syslog

SSL certificat will need automation renewal

invalid@example.com (Daniel Rouleau) — Fri, 13 Mar 2026 22:57:47 +0000

Good day
I don't know if you saw that annoncement https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days but i just did a certificat renewal for an other server (not ISPconfig) and it is now only good for 200 days, so I will need to manually renew twice this year, I also have multiple web site manage on ISPconfig that used manual certificat that I will need to renew, I don't use let's encryp that much because over time I have found it that it...

SSL certificat will need automation renewal

phpMyAdmin times out

invalid@example.com (SupportMyster) — Tue, 10 Mar 2026 16:49:59 +0000

Thank you for ISPConfig. Love it.
The sites on the server work but domain.tld/phpmyadmin times out regardless of domain.
I assume I have a config issue. Any and all assistance appreciated.

Ubuntu 22.04 LTS
ISPConfig 3.3.1
PHP 8.1

update-alternatives all show php8.1
ISPConfig -> System-> Config -> Web -> PHP Settings all show 8.1
ISPConfig -> System -> Config -> FastCGI shows 8.1
apt install phpmyadmin shows latest installed 4:5.1.1+dfsgl-5ubuntu1

php --ini all show 8.1
but phpinfo shows...

phpMyAdmin times out

CREATE MASTER USER IN DOVECOT FOR SYNCING IN ISPCONFIG

invalid@example.com (Jose Miguel Aracil) — Thu, 05 Mar 2026 14:41:20 +0000

Hi
I have trying to add a master user in dovecot by serveral commands as
htpasswd -c -s /etc/dovecot/master-users usermaster
or
doveadm pw -s SHA512-CRYPT -u masteradmin >> /etc/dovecot/master-users
and enabling configuring /etc/dovecot/conf.d/auth-master.conf.ext and enabling acl in dovecot.conf etc..

But when I try to sync with jose@aditted.com*usermaster , always I get Wrong username or password.

Could you help me or there anyways activate in ispconfig gui ??

Regards

Multiserver Two Webservers

invalid@example.com (MarvinFreeman) — Sat, 28 Feb 2026 18:00:47 +0000

We have a two server multiserver setup with two webservers. The main server has an IPv4 address with several websites on it, main.example.com. The secondary one has only an IPv6 address and one website, other.example.com. They are part of the same internal network.

I can't figure out how to configure the sites using ispconfig to have requests to other.example.com go to the webserver on other.example.com rather than main.example.com.

PGP Key error after update from Debian 12 to 13

invalid@example.com (muekno) — Sat, 28 Feb 2026 13:57:49 +0000

Signing key on 15058500A0235D97F5D10063B188E2B695BD4743 is bad: The primary key is not live because: Expired on 2026-02-04T10:25:46Z
Error: The repository 'https://packages.sury.org/php bookworm InRelease' is not signed.

Does anyone has any idea how to fix

Web quota ISPConfig

invalid@example.com (dgg96) — Tue, 24 Feb 2026 15:12:44 +0000

Hi,

I have a server with ispconfig which does not show website quotas. Database and email quotas are shown.

I have other servers where website quotas are displayed.

ISPConfig Version: 3.3.0p3

View attachment 9506

Acting as a smarthost

invalid@example.com (dan-v) — Tue, 17 Feb 2026 23:17:45 +0000

Trying to get another host to send trough ISPConfig, I have found the following recommendation in an old thread;

Acting as a smarthost

Apache Websocket for N8N

invalid@example.com (Taxi) — Mon, 09 Feb 2026 06:27:21 +0000

Hello,
I'm running n8n within a docker container. It is accessible via subdomain and reverse proxy. I placed the Apache Directive below which does the trick to access n8n via https://n8n.example.com

# Exclude ACME challenge from proxy

ProxyPass !

# Proxy everything else
ProxyPreserveHost On
ProxyPass / http://localhost:5678/
ProxyPassReverse / http://localhost:5678/

I can connect n8n to external...

Apache Websocket for N8N

MySQL replication and clusters suggestions

invalid@example.com (/dev/null/) — Mon, 02 Feb 2026 23:07:08 +0000

I been looking for solution to a bit complicated issue.
I have F(ast) server and S(low) server, both serve mysql and www.

I would like to have a (not in real time) copy of F server on my S server, in case of F downtime, the main traffic is pushed to S server, but while that is happening all edit/inserts are happening on S database, as soon as F come back to life it should sync.

I tried:
- mysql master-slave its great for small downtimes when visibility is important but writing to slave is...

MySQL replication and clusters suggestions