~2 min read • Updated Mar 1, 2026
1. Introduction
The file /usr/local/directadmin/conf/directadmin.conf contains the primary configuration settings for DirectAdmin.
If a variable is not present in this file, DirectAdmin uses its internal default value.
Adding a variable overrides the built in default.
Modify a variable from the command line:
da config-set variable_name value
systemctl restart directadmin
Example:
da config-set letsencrypt 1
systemctl restart directadmin
2. Security & Authentication
| Variable | Default | Description |
|---|---|---|
| bruteforce | 1 | Enable/disable Brute Force Monitor |
| brutecount | 20 | Failed login attempts before blocking IP |
| brute_dos_count | 100 | Invalid login requests before blocking |
| user_brutecount | 30 | Attempts on a single user before admin alert |
| ip_brutecount | 30 | Attempts from one IP before admin alert |
| clear_blacklist_ip_time | 86400 | Auto unblock time for blacklisted IPs (0 = never) |
| hide_brute_force_notifications | 1 | Hide brute force alerts from Message System |
| twostep_auth | 1 | Enable Two Step Authentication (2FA) |
| twostep_auth_discrepancy | 1 | Allowed time drift for 2FA (each unit = 30s) |
| twostep_auth_trust_days | 30 | Trusted device duration after 2FA login |
| login_keys | 1 | Enable Login Keys |
| login_keys_notify_on_creation | 1 | Notify admin when a Login Key is created |
| allow_foreign_key | 0 | Allow session keys from non local IPs |
3. SSL & Let's Encrypt
| Variable | Default | Description |
|---|---|---|
| letsencrypt | 1 | Enable Let's Encrypt |
| acme_server_cert_enabled | 0 | Auto issue SSL for server hostname |
| acme_server_cert_provider | - | Provider: letsencrypt / zerossl / staging |
| acme_server_cert_account | - | Email for ACME account |
| acme_server_cert_additional_domains | - | Additional SAN domains |
| admin_ssl_cert_on_create | 1 | Auto issue SSL on domain creation |
| admin_ssl_replace_all_expired_invalid | 0 | Auto replace expired/invalid certs |
| admin_ssl_poll_frequency | 5m:15m:30m:1h:12h:1d | Certificate check frequency |
| certificate_common_name_with_www | 0 | Use www.domain.com as CN |
4. Backup & Restore
| Variable | Default | Description |
|---|---|---|
| backup_gzip | 2 | Compression: 0=tar, 1=gzip, 2=zstd |
| incremental_ftp | 1 | Incremental FTP uploads |
| backup_tmpdir | /home/tmp | Temporary backup directory |
| skip_domains_in_backups | 0 | Skip /home/user/domains |
| skip_imap_in_backups | 0 | Skip IMAP mail |
| skip_hometargz_in_backups | 0 | Skip home.tar.gz |
| backup_nice | 19 | Backup process priority |
| backup_hard_link_check | 1 | Check hard links before backup |
5. Email & Spam
| Variable | Default | Description |
|---|---|---|
| mail_sni | 1 | Enable SNI for Exim/Dovecot |
| max_per_email_send_limit | 200 | Daily outgoing limit per mailbox |
| max_user_send_limit | -1 | Max limit settable by reseller |
| default_pop_quota | 50 | Default mailbox quota (MB) |
| spam_inbox_prefix | 1 | Use INBOX.spam instead of Junk |
| parse_php_mail_log_at_limit | 1 | Log PHP mail() calls |
6. DNS & Networking
| Variable | Default | Description |
|---|---|---|
| dnssec | 1 | Enable DNSSEC |
| allow_dns_underscore | 1 | Allow underscores in DNS records |
| default_ttl | 14400 | Default DNS TTL |
| ipv6 | 1 | Enable IPv6 |
| add_domain_to_domainips | 0 | Manage domainips for outgoing mail IP |
7. Performance & Logging
| Variable | Default | Description |
|---|---|---|
| dataskq_run_interval | 1m | Task queue execution interval |
| dataskq_max_instances | 0 | Max concurrent dataskq processes |
| timeout | 60 | Max request execution time |
| errorlog | /var/log/directadmin/error.log | Error log path |
| systemlog | /var/log/directadmin/system.log | System log path |
8. Other Important Settings
| Variable | Default | Description |
|---|---|---|
| force_ssl | 0 | Force HTTPS for all users |
| hsts | -1 | Enable HSTS for login page |
| x_frame_options | sameorigin | Clickjacking protection |
| language | en | Default panel language |
| max_username_length | 16 | Maximum username length |
| allow_numeric_username | 0 | Allow numeric-only usernames |
| allow_upper_case_username | 0 | Allow uppercase usernames |
Written & researched by Dr. Shahin Siami