fattain-naime/cwp-superpowers/cwp-webserver

CWP Web Server Management

Manage Apache, Nginx, Varnish, and LiteSpeed web server configurations within CWP. Handle vhost templates, module management, reverse proxy setups, and common web server issues.

Overview

Choose from multiple web server stacks. The selected stack determines how requests are processed and which configuration files to edit.

Service Detection

Detect which web servers are installed:

# Apache
systemctl is-active httpd 2>/dev/null && echo "Apache: active" || echo "Apache: not running"
 
# Nginx
systemctl is-active nginx 2>/dev/null && echo "Nginx: active" || echo "Nginx: not running"
 
# Varnish
systemctl is-active varnish 2>/dev/null && echo "Varnish: active" || echo "Varnish: not running"
 
# LiteSpeed (optional)
systemctl is-active lsws 2>/dev/null && echo "LiteSpeed: active" || echo "LiteSpeed: not installed"

Port Mapping

Vhost Templates

Location: /usr/local/cwpsrv/htdocs/resources/conf/web_servers/

Critical: Never edit templates directly -- they are overwritten on CWP updates. Create custom copies with different names.

Template Variables

Templates support these replacement variables:

• %domain% -- Domain name
• %ip% -- Server IP address
• %user% -- Username
• %docroot% -- Document root path

Rebuilding Vhosts

# Rebuild all vhosts
/scripts/cwp_api webservers rebuild_all
 
# Rebuild for specific user
/scripts/cwp_api webservers rebuild_user USERNAME
 
# Rebuild user configs
/scripts/cwpsrv_rebuild_user_conf

Apache Configuration

Main Config Files

Apache Modules

Common Apache Operations

# Restart Apache
systemctl restart httpd
 
# Test configuration
apachectl configtest
 
# Check loaded modules
apachectl -M
 
# View error log
tail -f /usr/local/apache/logs/error_log
 
# View domain log
tail -f /usr/local/apache/domlogs/DOMAIN.log

SSL Configuration

For SSL certificate management, AutoSSL, and TLS hardening, see the cwp-security skill (references/ssl-tls.md).

Improve SSL grade by editing /usr/local/apache/conf.d/ssl.conf:

SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLHonorCipherOrder on

Nginx Configuration

Main Config Files

Common Nginx Operations

# Restart Nginx
systemctl restart nginx
 
# Test configuration
nginx -t
 
# Reload without downtime
nginx -s reload
 
# Check version and modules
nginx -V

Nginx as Reverse Proxy

When using Nginx -> Apache stack, Nginx handles static files and proxies dynamic requests to Apache on port 8181.

Brotli Compression (Nginx)

For detailed Brotli compression setup and configuration, see the cwp-performance skill (references/compression.md).

cd /etc/nginx/modules
wget http://dl1.centos-webpanel.com/files/nginx/modules/nginx-brotli-modules.zip
unzip nginx-brotli-modules.zip

Varnish Cache

Configuration

Common Varnish Operations

# Clear Varnish cache
/scripts/varnish_clear_cache
 
# Restart Varnish
systemctl restart varnish
 
# Check Varnish stats
varnishstat
 
# Check VCL syntax
varnishd -C -f /etc/varnish/default.vcl

Varnish Port Configuration

Varnish port varies by CWP version (80 or 82). Detect the actual port:

# Detect Varnish listening port
VARNISH_PORT=$(ss -tlnp | grep varnish | grep -oP ':\K\d+' | head -1)
echo "Varnish port: ${VARNISH_PORT:-unknown}"
 
# Or check configuration
grep VARNISH_LISTEN_PORT /etc/varnish/varnish.params 2>/dev/null || \
grep listen /etc/varnish/varnish.params 2>/dev/null

Common Varnish ports:

• Port 82 -- Most common in newer CWP versions
• Port 80 -- Some older configurations

Configure in /etc/varnish/varnish.params:

VARNISH_LISTEN_PORT=82

Varnish Backend Configuration

Backend port also varies. Check actual configuration:

# Detect Varnish backend port
grep -E '\.port\s*=' /etc/varnish/default.vcl 2>/dev/null

Common backend ports:

• 8181 -- Apache behind Nginx proxy (newer CWP)
• 8080 -- Apache behind Nginx proxy (older CWP)

Brotli Compression (Apache)

For detailed Apache Brotli setup, see the cwp-performance skill (references/compression.md).

yum install pcre-devel cmake -y
cd /usr/local/src
git clone https://github.com/google/brotli.git
cd brotli && git checkout v1.0
./configure-cmake && make && make install

Redirect and Proxy Headers

ERR_TOO_MANY_REDIRECTS Fix

When using Nginx -> Varnish -> Apache, add to .htaccess:

SetEnvIf X-Forwarded-Proto "https" HTTPS=on

Cloudflare Real IP

Ensure mod_cloudflare is loaded to see real visitor IPs instead of Cloudflare IPs.

Troubleshooting

Quick Diagnostic Commands

# Check all web services
systemctl status httpd nginx varnish
 
# Check listening ports
ss -tlnp | grep -E ':(80|443|82|8181)\s'
 
# Check for configuration errors
apachectl configtest && nginx -t
 
# Recent error logs
tail -20 /usr/local/apache/logs/error_log
tail -20 /var/log/nginx/error.log

Additional Resources

• references/apache.md -- Apache configuration and module details
• references/nginx.md -- Nginx configuration and reverse proxy setup
• references/varnish.md -- Varnish cache configuration and VCL
• references/litespeed.md -- LiteSpeed Enterprise setup