Everything you need to deploy, maintain, and lock down the self-updating hub at neuage.health.
public_html on every load..htaccess.noindex.public_html.index.html, delete it so there's no confusion about which loads.{ops,affiliate,branding,assets} folder — it's an accidental leftover and is already hidden by the hub anyway.Your server currently has a default.php. To guarantee the hub loads at neuage.health, add an .htaccess that lists index.php first.
public_html..htaccess (with the leading dot, no extension).It contains this line, which does the work:
DirectoryIndex index.php index.html default.php
You don't maintain the list by hand. On every visit the hub scans public_html and:
index.html, default.php, .htaccess, all dotfiles, and the stray brace folder.Each folder card is tagged so you know what opens when you click it:
index.html/index.php, so it opens a finished page."File listing" depends on a server setting. By default Hostinger allows directory browsing, so those folders show a file list. If directory listing is turned off (Options -Indexes), those same folders return a 403 instead. The sample .htaccess leaves listings on; flip the commented line if you'd rather lock raw folders down.
Two clearly-commented arrays at the top of index.php are all you ever touch.
Edit $CURATED — each line is 'folder' => ['Title','Description','Category','icon']. Order here = display order.
$CURATED = [ // folder/file name Title Description Category icon 'ops' => ['Operations Hub', 'Internal ops home — SOPs & processes.', 'Operations', 'gear'], 'branding' => ['Branding', 'Logos, color system, typography.', 'Brand', 'palette'], // …add a new top-priority section the same way ];
Available icon keys: gear chat users chart palette folderopen image check doc folder file.
Add its exact name to $IGNORE. Dotfiles are hidden automatically.
$IGNORE = [ $SELF, 'index.html', 'index.php', 'default.php', '.htaccess', 'cgi-bin', '.well-known', '{ops,affiliate,branding,assets}', // 'staging', 'admin', ← add anything else to hide ];
Yes — and the right method protects not just the hub page but every asset folder behind it. Use HTTP Basic Auth at the directory level (not a PHP login, which would only guard index.php and leave the raw folders reachable directly).
Hostinger writes the .htaccess rules and the encrypted .htpasswd for you. Everything in that folder — the hub page and the asset directories — then prompts for login.
If you prefer to do it yourself, uncomment this block in your .htaccess and create a .htpasswd file (hPanel can generate the hashed line, or use the htpasswd tool). AuthUserFile must be the absolute server path.
AuthType Basic AuthName "NEUAGE OPS — Restricted" AuthUserFile /home/uXXXXXXXX/domains/neuage.health/public_html/.htpasswd Require valid-user
Which folder you protect matters. Locking public_html protects everything on neuage.health — including any public-facing pages like /affiliate. If some sections need to stay public, don't lock the whole root. Instead, move the internal hub and its private assets into a subfolder (e.g. neuage.health/hub/) and apply Directory Privacy to that folder only, leaving public pages reachable at the root.
Basic Auth sends credentials over the connection, so make sure the site is served over HTTPS (Hostinger provides free SSL — enable it in hPanel if it isn't already).
.htaccess isn't in place or isn't named exactly .htaccess. Re-check step 2, then hard-refresh.$IGNORE, or it starts with a dot. Otherwise just reload — there's no cache to clear.index file — add one, or accept the "File listing" behavior, or turn listings off (see section 3).AuthUserFile path is almost always the culprit — it must be the absolute server path to .htpasswd, which you can copy from hPanel's File Manager.