How to enable HTTP/2 on secondary domain vhosts in CyberPanel without GUI reset

Root Cause Diagnosis When secondary domains or child vhosts are created in CyberPanel, OpenLiteSpeed/LiteSpeed Web Server (OLS/LSWS) inherits virtual host listener bindings that often lack explicit HTTP/2 protocol declarations or ALPN (Application-Layer Protocol Negotiation) flags. Updating virtual host parameters or toggling SSL via the CyberPanel GUI regularly overwrites custom vhost settings back to default templates, … Read more

aaPanel Docker manager bridge network conflicting with local host IP subnets

Root Cause Diagnosis When aaPanel initializes its Docker Manager plugin, Docker automatically assigns default IP subnets (typically 172.17.0.0/16 or sequentially picked 172.X.0.0/16 blocks) to the default bridge interface (docker0) and custom panel-managed networks. If these automatically generated CIDR pools overlap with existing local host interfaces, LAN ranges, or VPN subnets, the host’s routing table prioritizes … Read more

Fix: Apache graceful restart failing due to lingering defunct workers

Root Cause Diagnosis An Apache graceful restart (apachectl graceful or systemctl reload apache2) sends a SIGWINCH signal instructing parent and worker processes to finish active requests before exiting. When worker threads are blocked on non-interruptible I/O operations, deadlocked database connections, or unmanaged C-extension subprocesses (e.g., PHP extensions or mod_wsgi threads), they ignore the graceful shutdown … Read more

Resolving CyberPanel blank login screen after MariaDB package upgrade

Root Cause Diagnosis When MariaDB is upgraded on a CyberPanel server, package updates frequently replace shared C client libraries (such as libmariadb.so or libmariadb3) or change default socket paths and strict SQL modes. CyberPanel’s underlying Python/Django environment relies on these specific database bindings and database schema compatibility to render the login framework. As a result, … Read more

Nginx proxy_pass stripping Authorization bearer header: Fix and config syntax

Root Cause Diagnosis Nginx strips or fails to forward the Authorization header during a proxy_pass request when the header contains non-standard characters, when underscores_in_headers is disabled, or most commonly, when multi-tier proxy/rewrite rules clear header buffers. Additionally, if the downstream application expects lowercase header handling or Nginx is configured to drop unhandled headers during subrequests … Read more

Resolving refund credited to canceled or closed credit card account

When a merchant initiates a refund to a canceled or closed credit card account, the acquirer processes the transaction using the original Payment Reference Number (PRN) / Acquirer Reference Number (ARN) through the card network switch (Visa, Mastercard, or RuPay). The issuing bank receives the incoming clearing message (0200 / 0220 presentment) and, because the … Read more

Bank account debit freeze without notice: Step-by-step procedure to unfreeze lien amount

A debit freeze or total account lien occurs when a bank’s Core Banking Solution (CBS) automatically places a hold flag (ACCOUNT_STATUS_DEBIT_FREEZE) on a ledger in response to an automated notice from statutory authorities, law enforcement agencies (such as Cyber Crime Cells), or internal Anti-Money Laundering (AML) monitoring scripts. This happens without prior notification because statutory … Read more

Resolving credit card international transaction failed: Missing merchant 3D Secure fallback

International credit card transaction failures due to missing merchant 3D Secure (3DS) fallbacks occur when an issuing bank in a Strong Customer Authentication (SCA) or Two-Factor Authentication (2FA) mandated jurisdiction (such as India’s RBI or EU’s PSD2) rejects an incoming cross-border authorization request that lacks EMV 3DS payload parameters (ThreeDSecureContext). When a foreign merchant operates … Read more

How to draft an escalation email to RBI Banking Ombudsman for uncredited chargebacks

Uncredited chargebacks occur when a Regulated Entity (RE) completes the interbank settlement via NPCI/Visa/Mastercard switches but fails to trigger the internal Core Banking Solution (CBS) credit entry to the customer’s ledger, leaving the funds stranded in an internal suspense account. This statutory lapse violates RBI’s Ombudsman Scheme framework for Turnaround Time (TAT) and compensation mandates … Read more

Step-by-step guide to resolving unreversed authorization holds on RuPay / Visa cards

Unreversed authorization holds occur when a payment gateway or acquiring bank successfully validates funds (auth_code generated) during a pre-authorization or failed transaction lifecycle, but fails to receive or process the subsequent reversal (void or reversal_advice) message within the acquiring network’s TTL window. This typically stems from an interrupted webhook handshake between the merchant’s payment processor … Read more