5 Commits

Author SHA1 Message Date
myron ea58754e62 Fix .git block: RedirectMatch/FilesMatch are not honored on this LiteSpeed vhost, use mod_rewrite instead 2026-07-04 15:56:50 -05:00
myron 8ad58278d0 Block public access to .git directory (leaked live GitHub PAT)
The docRoot is the git working tree, so .git/ was directly downloadable
over HTTPS (curl https://orbis.orbishosting.com/.git/config returned 200),
exposing the origin remote URL with an embedded GitHub personal access
token in plaintext. Added a .htaccess denying dotfiles/.git and a
matching OpenLiteSpeed vhost context as defense in depth. The exposed
token should be revoked/rotated on GitHub regardless of this fix.
2026-07-04 14:17:35 -05:00
myron b9ebc760e8 Add SEO meta tags and replace CyberPanel placeholder with client portal page 2026-06-09 22:30:51 +00:00
myron 86c35df678 Add vhost config 2026-05-25 13:52:17 +00:00
myron a7068c4052 Initial commit 2026-05-22 12:52:48 +00:00