sync: updated homepage, assets, robots.txt, sitemap, deploy webhook

index.html

@@ -12,7 +12,12 @@
   <meta property="og:title" content="Orbis Hosting — Reliable Web Hosting, VPS & Managed Servers">
   <meta property="og:description" content="Fast, reliable web hosting and VPS solutions. SSD storage, 99.9% uptime, and expert 24/7 support.">
   <meta property="og:url" content="https://orbishosting.com/">
-  <meta name="twitter:card" content="summary">
+  
+  <meta property="og:image" content="https://orbishosting.com/assets/og-image.jpg" />
+  <meta property="og:image:width" content="1200" />
+  <meta property="og:image:height" content="630" />
+  <meta name="twitter:card" content="summary_large_image" />
+  <meta name="twitter:image" content="https://orbishosting.com/assets/og-image.jpg" />
   <meta name="twitter:title" content="Orbis Hosting — Web Hosting & VPS">
   <meta name="twitter:description" content="Fast, reliable web hosting and VPS solutions. SSD storage, 99.9% uptime, expert support.">
   <style>

robots.txt

@@ -0,0 +1,6 @@
+User-agent: *
+Allow: /
+Disallow: /admin/
+Disallow: /api/
+Disallow: /config/
+Sitemap: https://orbishosting.com/sitemap.xml

sitemap.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+  <url><loc>https://orbishosting.com/</loc><lastmod>2026-06-14</lastmod><changefreq>weekly</changefreq><priority>1.0</priority></url>
+</urlset>

webhook.php

@@ -0,0 +1,69 @@
+<?php
+/**
+ * GitHub Auto-Deploy Webhook
+ * Verifies GitHub HMAC signature, then queues the repo for git pull.
+ * A root cron job (/usr/local/bin/jarvis-deploy.sh) processes the queue every minute.
+ *
+ * WEBHOOK_SECRET is loaded from api/config.php (gitignored) — never hardcoded here.
+ */
+
+require_once __DIR__ . '/../api/config.php';
+if (!defined('WEBHOOK_SECRET')) {
+    http_response_code(500);
+    echo json_encode(['error' => 'Webhook not configured']);
+    exit;
+}
+define('DEPLOY_QUEUE',   '/tmp/jarvis-deploy-queue.txt');
+define('DEPLOY_LOG,     '/var/www/jarvis/logs/deploy.log');
+
+header('Content-Type: application/json');
+
+$payload = file_get_contents('php://input');
+$sig     = $_SERVER['HTTP_X_HUB_SIGNATURE_256'] ?? '';
+$expected = 'sha256=' . hash_hmac('sha256', $payload, WEBHOOK_SECRET);
+
+if (!hash_equals($expected, $sig)) {
+    http_response_code(403);
+    echo json_encode(['error' => 'Invalid signature']);
+    exit;
+}
+
+$data  = json_decode($payload, true);
+$repo  = $data['repository']['name'] ?? '';
+$ref   = $data['ref'] ?? '';
+$pusher = $data['pusher']['name'] ?? 'unknown';
+
+// Only deploy on pushes to main
+if ($ref !== 'refs/heads/main') {
+    echo json_encode(['ok' => true, 'skipped' => "ref $ref is not main"]);
+    exit;
+}
+
+$repoMap = [
+    'jarvis' => '/var/www/jarvis',
+];
+
+if (!isset($repoMap[$repo])) {
+    http_response_code(404);
+    echo json_encode(['error' => "Unknown repo: $repo"]);
+    exit;
+}
+
+$path = $repoMap[$repo];
+
+// NovaCPX lives on a private VM — the VM polls GitHub every minute via cron
+// This webhook receipt confirms GitHub delivered the push notification
+if ($path === '__NOVACPX_VM__') {
+    $commit = $data['after'] ?? 'HEAD';
+    $msg = "[" . date('Y-m-d H:i:s') . "] NovaCPX push by $pusher (commit: $commit) — VM will deploy within 1 min";
+    file_put_contents(DEPLOY_LOG, $msg . "\n", FILE_APPEND | LOCK_EX);
+    echo json_encode(['ok' => true, 'queued' => 'novacpx', 'commit' => $commit]);
+    exit;
+}
+
+file_put_contents(DEPLOY_QUEUE, $path . "\n", FILE_APPEND | LOCK_EX);
+
+$msg = "[" . date('Y-m-d H:i:s') . "] Queued deploy: $repo by $pusher -> $path";
+file_put_contents(DEPLOY_LOG, $msg . "\n", FILE_APPEND | LOCK_EX);
+
+echo json_encode(['ok' => true, 'queued' => $repo, 'path' => $path]);