Advanced settings
The host's Advanced tab gathers configuration options for mail, caching services, file transfer, the operating system, and database monitoring. These options control the host's runtime environment.
Note
Many Advanced options are hidden for cPanel and DirectAdmin hosts.
This tab covers:
Mail settings - set up DomainKeys Identified Mail (DKIM) and a development mail catcherVarnish options - tune the Varnish HTTP cacheRabbitMQ options - configure the RabbitMQ message broker pluginsFTP server options - SFTP and FTPS file-transfer accessOperating system - choose the OS, extra packages, and the maintenance windowAdvanced database monitoring - deep monitoring for your databasesNew Relic Infrastructure - send server metrics to your own New Relic account
Mail settings
Set up DKIM (your mail domain's FQDN and a selector) so receivers can authenticate your outbound mail. You can also enable a development mail catcher (Mailpit or Mailhog) that captures outgoing mail so you can inspect it without delivering it. See Email.
Warning
A development mail catcher intercepts mail instead of sending it. Never enable it on a production host.
Varnish options
Varnish provides HTTP caching. You can tune Varnish behavior from the Advanced tab. These options appear once an application has Varnish enabled. For details on caching strategy and configuration, see Services.
By default, Varnish uses a default VCL that TurboStack tunes for your application type. To supply your own, turn on the custom VCL option and place your VCL file in /etc/varnish/conf.d/ on the server.
Tip
Start with the default VCL. Only switch to a custom VCL when you need caching rules the default does not cover.
RabbitMQ options
RabbitMQ provides message queuing for your applications. The Advanced tab configures the broker itself. See Services for related service configuration.
This pane is only usable once RabbitMQ is in use on the host. Until then it shows the message that RabbitMQ is not activated, and asks you to first create an application with RabbitMQ enabled. Enable RabbitMQ on an application under Configure application > Technologies, then return here.
When RabbitMQ is active, you can select the broker plugins to install (rabbitmq_plugins). The field is a multi-select, so you can pick more than one:
rabbitmq_plugins: [rabbitmq_shovel, rabbitmq_shovel_management]
Publish the host to install the plugins you selected.
FTP server options
You can configure file transfer access, including SSH File Transfer Protocol (SFTP) and FTPS settings and the protocols you want to allow. These options appear once the host has an FTP user. For interactive shell access, see SSH access.
Enable Valid Certificate For FTP Server generates a Transport Layer Security (TLS) certificate for the FTP daemon using a hostname you choose. Turn the toggle on, then enter the FTP hostname. Clients that connect over FTPS then see a valid certificate instead of a self-signed one.
Important
The FTP hostname must point to the server's IP address, or the certificate cannot be issued.
Operating system
You can select and configure the host's operating system and related settings.
Tip
Keep os_extra_packages as small as possible. Each added package increases the host's maintenance and security surface.
Tip
Most security updates are applied automatically without a reboot. The maintenance window is for the occasional update that does need a reboot - set it to a low-traffic time (for example overnight) so the reboot never lands during your busiest hours.
Supervisor
Supervisord support (supervisor_enabled) installs a process manager on the host. A process manager keeps a long-running process running: it starts the process, restarts it when it exits, and collects its output in a log file. Use it for queue workers, message-queue consumers and other background processes that must not stop.
Each system user gets its own instance, so you configure your processes without root access:
~ is your system user's home directory, for example /var/www/prod/. After you add or change a configuration file, apply it with the supervisorctl command over SSH.
TurboStack's own way of running background processes is a user system service, managed by systemd. That needs no host-level setting and is the better starting point: it is already used for the queue workers and consumers of the supported applications. Turn on Supervisord support when your application or deployment tooling expects a supervisor instead.
Windows update schedule
On a Windows host, the Operating System pane shows a Windows update schedule instead of the Linux settings above. The schedule is the Windows counterpart of the maintenance window. It sets the day and the hour when Windows updates are installed, so a reboot happens at a moment you choose.
The schedule is a table with a Day and an Hours column. Click Edit on the entry, select a day and an hour, then click Save. A new host starts with Sunday 09:00.
Note
This applies only to hosts running Windows. On Linux hosts you set the
Advanced database monitoring
Advanced Database Monitoring collects query-level metrics for the databases on this host and sends them to a central monitoring master server, where you read the dashboards. Enable it when you need to see which queries are slow, not only that the database is busy. See Monitoring.
The pane is only usable when the host has a database service configured (MySQL, PostgreSQL, Microsoft SQL Server or MongoDB). Without one it shows No database server configured - add a database on the Services tab first.
pmm_master:
server_hostname: monitoring.example.com
pmm_sampling_rate: 50
Tip
Keep the default sampling rate unless you are investigating a specific problem. Lower it temporarily, then set it back.
If you do not have a monitoring master server yet, you can run one on TurboStack - see Self-hosted platforms.
New Relic Infrastructure
The New Relic Infra pane connects the server itself to your own New Relic account. Server metrics such as processor, memory, disk and processes then appear next to the application data you already collect there. This is a bring-your-own-account setting: TurboStack installs and configures the agent, you supply the license key and keep your own New Relic subscription.
The pane only appears in the left menu when at least one application on this host has New Relic application performance monitoring enabled. Turn that on first under Configure application > Monitoring > New Relic APM - see Applications.
Leave the license key empty to not install the infrastructure agent. Publish the host to apply either change.
Note
This pane covers the server's own metrics. The application performance monitoring keys for New Relic, Tideways and Blackfire, and the Docker and Kubernetes settings, are configured per application - in the Configure application dialog (Technologies and Monitoring tabs), not on the host's Advanced tab. See Applications.
Related
- Installing extra OS packages
- FTP and SFTP access
- User system services - the alternative to Supervisor.
- Services
- Applications
- SSH access
- Monitoring
- Hosts