mirror of
https://github.com/myronblair/do-server-config
synced 2026-07-27 21:18:32 -05:00
[orbis] Weekly backup 2026-07-07 — 318 files changed, 48597 insertions(+), 7 deletions(-)
This commit is contained in:
DO Server Backup
@@ -0,0 +1,7 @@
|
||||
*.log
|
||||
.DS_Store
|
||||
*.swp
|
||||
|
||||
uploads/
|
||||
legacy/
|
||||
dist/
|
||||
@@ -0,0 +1,14 @@
|
||||
# Deny public access to the git working directory and legacy/unused
|
||||
# server directories that live inside the web docroot but were never
|
||||
# meant to be reachable over HTTP.
|
||||
#
|
||||
# Found during security review (2026-07): https://orbishosting.com/.git/config
|
||||
# was directly downloadable and exposed a live GitHub PAT in the remote URL.
|
||||
# That token must also be revoked/rotated on GitHub — this file only closes
|
||||
# the HTTP exposure, it does not invalidate the leaked credential.
|
||||
RewriteEngine On
|
||||
RewriteRule ^\.git(/|$) - [F,L]
|
||||
RewriteRule ^legacy(/|$) - [F,L]
|
||||
RewriteRule ^dist(/|$) - [F,L]
|
||||
RewriteRule ^extensions(/|$) - [F,L]
|
||||
RewriteRule ^config(/|$) - [F,L]
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 52 KiB |
@@ -0,0 +1,91 @@
|
||||
docRoot $VH_ROOT/public_html
|
||||
vhDomain $VH_NAME
|
||||
vhAliases www.$VH_NAME
|
||||
adminEmails admin@orbishosting.com
|
||||
enableGzip 1
|
||||
enableIpGeo 1
|
||||
|
||||
index {
|
||||
useServer 0
|
||||
indexFiles index.php, index.html
|
||||
}
|
||||
|
||||
errorlog $VH_ROOT/logs/$VH_NAME.error_log {
|
||||
useServer 0
|
||||
logLevel WARN
|
||||
rollingSize 10M
|
||||
}
|
||||
|
||||
accesslog $VH_ROOT/logs/$VH_NAME.access_log {
|
||||
useServer 0
|
||||
logFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i""
|
||||
logHeaders 5
|
||||
rollingSize 10M
|
||||
keepDays 10
|
||||
compressArchive 1
|
||||
}
|
||||
|
||||
scripthandler {
|
||||
add lsapi:orbis2682 php
|
||||
}
|
||||
|
||||
extprocessor orbis2682 {
|
||||
type lsapi
|
||||
address UDS://tmp/lshttpd/orbis2682.sock
|
||||
maxConns 10
|
||||
env LSAPI_CHILDREN=10
|
||||
initTimeout 600
|
||||
retryTimeout 0
|
||||
persistConn 1
|
||||
pcKeepAliveTimeout 1
|
||||
respBuffer 0
|
||||
autoStart 1
|
||||
path /usr/local/lsws/lsphp85/bin/lsphp
|
||||
extUser orbis2682
|
||||
extGroup orbis2682
|
||||
memSoftLimit 1024M
|
||||
memHardLimit 1024M
|
||||
procSoftLimit 400
|
||||
procHardLimit 500
|
||||
}
|
||||
|
||||
phpIniOverride {
|
||||
|
||||
}
|
||||
|
||||
module cache {
|
||||
storagePath /usr/local/lsws/cachedata/$VH_NAME
|
||||
}
|
||||
|
||||
rewrite {
|
||||
enable 1
|
||||
autoLoadHtaccess 1
|
||||
}
|
||||
|
||||
context /.well-known/acme-challenge {
|
||||
location /usr/local/lsws/Example/html/.well-known/acme-challenge
|
||||
allowBrowse 1
|
||||
|
||||
rewrite {
|
||||
enable 0
|
||||
}
|
||||
addDefaultCharset off
|
||||
|
||||
phpIniOverride {
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
vhssl {
|
||||
keyFile /etc/letsencrypt/live/orbishosting.com/privkey.pem
|
||||
certFile /etc/letsencrypt/live/orbishosting.com/fullchain.pem
|
||||
certChain 1
|
||||
sslProtocol 24
|
||||
enableECDHE 1
|
||||
renegProtection 1
|
||||
sslSessionCache 1
|
||||
enableSpdy 15
|
||||
enableStapling 1
|
||||
ocspRespMaxAge 86400
|
||||
}
|
||||
@@ -0,0 +1,85 @@
|
||||
docroot $VH_ROOT/public_html
|
||||
enableipgeo 1
|
||||
vhdomain $VH_NAME
|
||||
phpinioverride
|
||||
enablegzip 1
|
||||
vhaliases www.$VH_NAME
|
||||
adminemails admin@orbishosting.com
|
||||
|
||||
context /.well-known/acme-challenge {
|
||||
location /usr/local/lsws/Example/html/.well-known/acme-challenge
|
||||
allowbrowse 1
|
||||
adddefaultcharset off
|
||||
phpinioverride
|
||||
|
||||
rewrite {
|
||||
enable 0
|
||||
}
|
||||
}
|
||||
|
||||
rewrite {
|
||||
enable 1
|
||||
autoloadhtaccess 1
|
||||
}
|
||||
|
||||
index {
|
||||
indexfiles index.php, index.html
|
||||
useserver 0
|
||||
}
|
||||
|
||||
extprocessor orbis2682 {
|
||||
memhardlimit 1024M
|
||||
procsoftlimit 400
|
||||
retrytimeout 0
|
||||
persistconn 1
|
||||
extuser orbis2682
|
||||
extgroup orbis2682
|
||||
memsoftlimit 1024M
|
||||
type lsapi
|
||||
address UDS://tmp/lshttpd/orbis2682.sock
|
||||
respbuffer 0
|
||||
autostart 1
|
||||
path /usr/local/lsws/lsphp85/bin/lsphp
|
||||
prochardlimit 500
|
||||
pckeepalivetimeout 1
|
||||
maxconns 10
|
||||
env LSAPI_CHILDREN=10
|
||||
inittimeout 600
|
||||
}
|
||||
|
||||
module cache {
|
||||
unknownkeywords storagepath /usr/local/lsws/cachedata/$VH_NAME
|
||||
param storagepath /usr/local/lsws/cachedata/$VH_NAME
|
||||
}
|
||||
|
||||
errorlog $VH_ROOT/logs/$VH_NAME.error_log {
|
||||
loglevel WARN
|
||||
useserver 0
|
||||
rollingsize 10M
|
||||
}
|
||||
|
||||
accesslog $VH_ROOT/logs/$VH_NAME.access_log {
|
||||
logheaders 5
|
||||
rollingsize 10M
|
||||
logformat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i""
|
||||
useserver 0
|
||||
keepdays 10
|
||||
compressarchive 1
|
||||
}
|
||||
|
||||
scripthandler {
|
||||
add lsapi:orbis2682 php
|
||||
}
|
||||
|
||||
vhssl {
|
||||
keyfile /etc/letsencrypt/live/orbishosting.com/privkey.pem
|
||||
certfile /etc/letsencrypt/live/orbishosting.com/fullchain.pem
|
||||
certchain 1
|
||||
sslprotocol 24
|
||||
enableecdhe 1
|
||||
renegprotection 1
|
||||
sslsessioncache 1
|
||||
enablespdy 15
|
||||
enablestapling 1
|
||||
ocsprespmaxage 86400
|
||||
}
|
||||
@@ -0,0 +1,91 @@
|
||||
docRoot $VH_ROOT/public_html
|
||||
vhDomain $VH_NAME
|
||||
vhAliases www.$VH_NAME
|
||||
adminEmails admin@orbishosting.com
|
||||
enableGzip 1
|
||||
enableIpGeo 1
|
||||
|
||||
index {
|
||||
useServer 0
|
||||
indexFiles index.php, index.html
|
||||
}
|
||||
|
||||
errorlog $VH_ROOT/logs/$VH_NAME.error_log {
|
||||
useServer 0
|
||||
logLevel WARN
|
||||
rollingSize 10M
|
||||
}
|
||||
|
||||
accesslog $VH_ROOT/logs/$VH_NAME.access_log {
|
||||
useServer 0
|
||||
logFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i""
|
||||
logHeaders 5
|
||||
rollingSize 10M
|
||||
keepDays 10
|
||||
compressArchive 1
|
||||
}
|
||||
|
||||
scripthandler {
|
||||
add lsapi:orbis2682 php
|
||||
}
|
||||
|
||||
extprocessor orbis2682 {
|
||||
type lsapi
|
||||
address UDS://tmp/lshttpd/orbis2682.sock
|
||||
maxConns 10
|
||||
env LSAPI_CHILDREN=10
|
||||
initTimeout 600
|
||||
retryTimeout 0
|
||||
persistConn 1
|
||||
pcKeepAliveTimeout 1
|
||||
respBuffer 0
|
||||
autoStart 1
|
||||
path /usr/local/lsws/lsphp85/bin/lsphp
|
||||
extUser orbis2682
|
||||
extGroup orbis2682
|
||||
memSoftLimit 1024M
|
||||
memHardLimit 1024M
|
||||
procSoftLimit 400
|
||||
procHardLimit 500
|
||||
}
|
||||
|
||||
phpIniOverride {
|
||||
|
||||
}
|
||||
|
||||
module cache {
|
||||
storagePath /usr/local/lsws/cachedata/$VH_NAME
|
||||
}
|
||||
|
||||
rewrite {
|
||||
enable 1
|
||||
autoLoadHtaccess 1
|
||||
}
|
||||
|
||||
context /.well-known/acme-challenge {
|
||||
location /usr/local/lsws/Example/html/.well-known/acme-challenge
|
||||
allowBrowse 1
|
||||
|
||||
rewrite {
|
||||
enable 0
|
||||
}
|
||||
addDefaultCharset off
|
||||
|
||||
phpIniOverride {
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
vhssl {
|
||||
keyFile /etc/letsencrypt/live/orbishosting.com/privkey.pem
|
||||
certFile /etc/letsencrypt/live/orbishosting.com/fullchain.pem
|
||||
certChain 1
|
||||
sslProtocol 24
|
||||
enableECDHE 1
|
||||
renegProtection 1
|
||||
sslSessionCache 1
|
||||
enableSpdy 15
|
||||
enableStapling 1
|
||||
ocspRespMaxAge 86400
|
||||
}
|
||||
@@ -0,0 +1,130 @@
|
||||
head 1.2;
|
||||
access;
|
||||
symbols;
|
||||
locks
|
||||
root:1.2; strict;
|
||||
comment @# @;
|
||||
|
||||
|
||||
1.2
|
||||
date 2026.05.15.20.05.14; author root; state Exp;
|
||||
branches;
|
||||
next 1.1;
|
||||
|
||||
1.1
|
||||
date 2026.05.15.20.04.10; author root; state Exp;
|
||||
branches;
|
||||
next ;
|
||||
|
||||
|
||||
desc
|
||||
@/usr/local/lsws/conf/vhosts/orbishosting.com/vhost.conf0
|
||||
@
|
||||
|
||||
|
||||
1.2
|
||||
log
|
||||
@Update
|
||||
@
|
||||
text
|
||||
@docRoot $VH_ROOT/public_html
|
||||
vhDomain $VH_NAME
|
||||
vhAliases www.$VH_NAME
|
||||
adminEmails admin@@orbishosting.com
|
||||
enableGzip 1
|
||||
enableIpGeo 1
|
||||
|
||||
index {
|
||||
useServer 0
|
||||
indexFiles index.php, index.html
|
||||
}
|
||||
|
||||
errorlog $VH_ROOT/logs/$VH_NAME.error_log {
|
||||
useServer 0
|
||||
logLevel WARN
|
||||
rollingSize 10M
|
||||
}
|
||||
|
||||
accesslog $VH_ROOT/logs/$VH_NAME.access_log {
|
||||
useServer 0
|
||||
logFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i""
|
||||
logHeaders 5
|
||||
rollingSize 10M
|
||||
keepDays 10
|
||||
compressArchive 1
|
||||
}
|
||||
|
||||
scripthandler {
|
||||
add lsapi:orbis2682 php
|
||||
}
|
||||
|
||||
extprocessor orbis2682 {
|
||||
type lsapi
|
||||
address UDS://tmp/lshttpd/orbis2682.sock
|
||||
maxConns 10
|
||||
env LSAPI_CHILDREN=10
|
||||
initTimeout 600
|
||||
retryTimeout 0
|
||||
persistConn 1
|
||||
pcKeepAliveTimeout 1
|
||||
respBuffer 0
|
||||
autoStart 1
|
||||
path /usr/local/lsws/lsphp85/bin/lsphp
|
||||
extUser orbis2682
|
||||
extGroup orbis2682
|
||||
memSoftLimit 1024M
|
||||
memHardLimit 1024M
|
||||
procSoftLimit 400
|
||||
procHardLimit 500
|
||||
}
|
||||
|
||||
phpIniOverride {
|
||||
|
||||
}
|
||||
|
||||
module cache {
|
||||
storagePath /usr/local/lsws/cachedata/$VH_NAME
|
||||
}
|
||||
|
||||
rewrite {
|
||||
enable 1
|
||||
autoLoadHtaccess 1
|
||||
}
|
||||
|
||||
context /.well-known/acme-challenge {
|
||||
location /usr/local/lsws/Example/html/.well-known/acme-challenge
|
||||
allowBrowse 1
|
||||
|
||||
rewrite {
|
||||
enable 0
|
||||
}
|
||||
addDefaultCharset off
|
||||
|
||||
phpIniOverride {
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
vhssl {
|
||||
keyFile /etc/letsencrypt/live/orbishosting.com/privkey.pem
|
||||
certFile /etc/letsencrypt/live/orbishosting.com/fullchain.pem
|
||||
certChain 1
|
||||
sslProtocol 24
|
||||
enableECDHE 1
|
||||
renegProtection 1
|
||||
sslSessionCache 1
|
||||
enableSpdy 15
|
||||
enableStapling 1
|
||||
ocspRespMaxAge 86400
|
||||
}
|
||||
@
|
||||
|
||||
|
||||
1.1
|
||||
log
|
||||
@Update
|
||||
@
|
||||
text
|
||||
@d79 13
|
||||
@
|
||||
@@ -0,0 +1,50 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Orbis Hosting — Reliable Web Hosting, VPS & Managed Servers</title>
|
||||
<meta name="description" content="Orbis Hosting delivers fast, reliable web hosting, VPS, and managed server solutions. SSD-powered infrastructure, 99.9% uptime guarantee, and expert support for businesses and developers.">
|
||||
<meta name="keywords" content="web hosting, VPS hosting, managed hosting, SSD web hosting, cloud hosting, domain registration, affordable web hosting, Orbis Hosting, business hosting, developer hosting">
|
||||
<meta name="robots" content="index, follow">
|
||||
<link rel="canonical" href="https://orbishosting.com/">
|
||||
<meta property="og:type" content="website">
|
||||
<meta property="og:title" content="Orbis Hosting — Reliable Web Hosting, VPS & Managed Servers">
|
||||
<meta property="og:description" content="Fast, reliable web hosting and VPS solutions. SSD storage, 99.9% uptime, and expert 24/7 support.">
|
||||
<meta property="og:url" content="https://orbishosting.com/">
|
||||
|
||||
<meta property="og:image" content="https://orbishosting.com/assets/og-image.jpg" />
|
||||
<meta property="og:image:width" content="1200" />
|
||||
<meta property="og:image:height" content="630" />
|
||||
<meta name="twitter:card" content="summary_large_image" />
|
||||
<meta name="twitter:image" content="https://orbishosting.com/assets/og-image.jpg" />
|
||||
<meta name="twitter:title" content="Orbis Hosting — Web Hosting & VPS">
|
||||
<meta name="twitter:description" content="Fast, reliable web hosting and VPS solutions. SSD storage, 99.9% uptime, expert support.">
|
||||
<style>
|
||||
*{margin:0;padding:0;box-sizing:border-box}
|
||||
body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;background:#0f1117;color:#e2e8f0;min-height:100vh;display:flex;flex-direction:column;align-items:center;justify-content:center;text-align:center;padding:2rem}
|
||||
.logo{font-size:2.5rem;font-weight:700;background:linear-gradient(135deg,#6366f1,#0ea5e9);-webkit-background-clip:text;-webkit-text-fill-color:transparent;margin-bottom:.5rem}
|
||||
.tagline{font-size:1.1rem;color:#94a3b8;margin-bottom:2.5rem}
|
||||
.badges{display:flex;gap:1rem;justify-content:center;flex-wrap:wrap;margin-bottom:2.5rem}
|
||||
.badge{background:#1e2535;border:1px solid #2d3748;border-radius:8px;padding:.6rem 1.2rem;font-size:.85rem;color:#cbd5e1}
|
||||
.badge strong{color:#6366f1}
|
||||
.cta{display:inline-block;background:linear-gradient(135deg,#6366f1,#0ea5e9);color:#fff;text-decoration:none;padding:.85rem 2rem;border-radius:8px;font-weight:600;font-size:1rem;transition:opacity .2s}
|
||||
.cta:hover{opacity:.85}
|
||||
.portal-link{margin-top:1.25rem;font-size:.85rem;color:#64748b}
|
||||
.portal-link a{color:#6366f1;text-decoration:none}
|
||||
.portal-link a:hover{text-decoration:underline}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="logo">Orbis Hosting</div>
|
||||
<p class="tagline">Reliable Web Hosting, VPS & Managed Servers</p>
|
||||
<div class="badges">
|
||||
<div class="badge"><strong>⚡</strong> SSD-Powered</div>
|
||||
<div class="badge"><strong>99.9%</strong> Uptime SLA</div>
|
||||
<div class="badge"><strong>24/7</strong> Expert Support</div>
|
||||
<div class="badge"><strong>🔒</strong> Free SSL</div>
|
||||
</div>
|
||||
<a href="mailto:support@orbishosting.com" class="cta">Get Started</a>
|
||||
<p class="portal-link">Existing customer? <a href="https://orbis.orbishosting.com">Sign in to your portal →</a></p>
|
||||
</body>
|
||||
</html>
|
||||
@@ -0,0 +1,6 @@
|
||||
User-agent: *
|
||||
Allow: /
|
||||
Disallow: /admin/
|
||||
Disallow: /api/
|
||||
Disallow: /config/
|
||||
Sitemap: https://orbishosting.com/sitemap.xml
|
||||
@@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
||||
<url><loc>https://orbishosting.com/</loc><lastmod>2026-06-14</lastmod><changefreq>weekly</changefreq><priority>1.0</priority></url>
|
||||
</urlset>
|
||||
@@ -0,0 +1,59 @@
|
||||
<?php
|
||||
/**
|
||||
* GitHub Auto-Deploy Webhook
|
||||
* Verifies GitHub HMAC signature, then queues the repo for git pull.
|
||||
* A root cron job (/usr/local/bin/jarvis-deploy.sh) processes the queue every minute.
|
||||
*
|
||||
* WEBHOOK_SECRET is loaded from api/config.php (gitignored) — never hardcoded here.
|
||||
*/
|
||||
|
||||
require_once __DIR__ . '/../api/config.php';
|
||||
if (!defined('WEBHOOK_SECRET')) {
|
||||
http_response_code(500);
|
||||
echo json_encode(['error' => 'Webhook not configured']);
|
||||
exit;
|
||||
}
|
||||
define('DEPLOY_QUEUE', '/tmp/jarvis-deploy-queue.txt');
|
||||
define('DEPLOY_LOG', '/home/orbishosting.com/logs/deploy.log');
|
||||
|
||||
header('Content-Type: application/json');
|
||||
|
||||
$payload = file_get_contents('php://input');
|
||||
$sig = $_SERVER['HTTP_X_HUB_SIGNATURE_256'] ?? '';
|
||||
$expected = 'sha256=' . hash_hmac('sha256', $payload, WEBHOOK_SECRET);
|
||||
|
||||
if (!hash_equals($expected, $sig)) {
|
||||
http_response_code(403);
|
||||
echo json_encode(['error' => 'Invalid signature']);
|
||||
exit;
|
||||
}
|
||||
|
||||
$data = json_decode($payload, true);
|
||||
$repo = $data['repository']['name'] ?? '';
|
||||
$ref = $data['ref'] ?? '';
|
||||
$pusher = $data['pusher']['name'] ?? 'unknown';
|
||||
|
||||
// Only deploy on pushes to main
|
||||
if ($ref !== 'refs/heads/main') {
|
||||
echo json_encode(['ok' => true, 'skipped' => "ref $ref is not main"]);
|
||||
exit;
|
||||
}
|
||||
|
||||
$repoMap = [
|
||||
'orbishosting' => '/home/orbishosting.com/public_html',
|
||||
'orbis-hosting-portal' => '/home/orbis.orbishosting.com/public_html',
|
||||
];
|
||||
|
||||
if (!isset($repoMap[$repo])) {
|
||||
http_response_code(404);
|
||||
echo json_encode(['error' => "Unknown repo: $repo"]);
|
||||
exit;
|
||||
}
|
||||
|
||||
$path = $repoMap[$repo];
|
||||
$ts = date('Y-m-d H:i:s');
|
||||
|
||||
file_put_contents(DEPLOY_QUEUE, $path . "\n", FILE_APPEND | LOCK_EX);
|
||||
file_put_contents(DEPLOY_LOG, "[$ts] Queued deploy: $repo by $pusher -> $path\n", FILE_APPEND | LOCK_EX);
|
||||
|
||||
echo json_encode(['ok' => true, 'queued' => $repo, 'path' => $path]);
|
||||
Reference in New Issue
Block a user