Add robots.txt #489

New Issue

OVERLORD · 2026-02-04T21:10:46+03:00

OVERLORD commented

2026-02-04 21:10:46 +03:00

Originally created by @ntimo on GitHub (Nov 13, 2019).

Hello,
I would like to suggest to add a robots.txt to disallow all indexing of the bitwarden installation.

User-agent: *
Disallow: /

Originally created by @ntimo on GitHub (Nov 13, 2019). Hello, I would like to suggest to add a robots.txt to disallow all indexing of the bitwarden installation. ``` User-agent: * Disallow: / ```

OVERLORD closed this issue

2026-02-04 21:10:56 +03:00

OVERLORD commented

2026-02-04 21:11:01 +03:00

@Jacobite89 commented on GitHub (Nov 14, 2019):

Setting the "X-Robots-Tag: none" HTTP-Header may be the better way.

e.g. this is my Caddyfile

#Caddyfile
vault.example.com {
  tls {$EMAIL}
  gzip

  header / {
    # Enable HTTP Strict Transport Security (HSTS)
    Strict-Transport-Security "max-age=31536000;"
    # Enable cross-site filter (XSS) and tell browser to block detected attacks
    X-XSS-Protection "1; mode=block"
    # Disallow the site to be rendered within a frame (clickjacking protection)
    X-Frame-Options "DENY"
    # Prevent search engines from indexing
    X-Robots-Tag "none"
  }

  # The negotiation endpoint is also proxied to Rocket
  proxy /notifications/hub/negotiate bitwarden:80 {
    transparent
  }

  # Notifications redirected to the websockets server
  proxy /notifications/hub bitwarden:3012 {
    websocket
  }

  # Proxy the Root directory to Rocket
  proxy / bitwarden:80 {
    transparent
  }
}

Source: https://developers.google.com/search/reference/robots_meta_tag?hl=en

@Jacobite89 commented on GitHub (Nov 14, 2019): Setting the "X-Robots-Tag: none" HTTP-Header may be the better way. e.g. this is my Caddyfile ``` #Caddyfile vault.example.com { tls {$EMAIL} gzip header / { # Enable HTTP Strict Transport Security (HSTS) Strict-Transport-Security "max-age=31536000;" # Enable cross-site filter (XSS) and tell browser to block detected attacks X-XSS-Protection "1; mode=block" # Disallow the site to be rendered within a frame (clickjacking protection) X-Frame-Options "DENY" # Prevent search engines from indexing X-Robots-Tag "none" } # The negotiation endpoint is also proxied to Rocket proxy /notifications/hub/negotiate bitwarden:80 { transparent } # Notifications redirected to the websockets server proxy /notifications/hub bitwarden:3012 { websocket } # Proxy the Root directory to Rocket proxy / bitwarden:80 { transparent } } ``` Source: https://developers.google.com/search/reference/robots_meta_tag?hl=en

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#489