[GH-ISSUE #721] Add robots.txt #488

New issue

Closed

opened 2026-03-03 01:29:49 +03:00 by kerem · 1 comment

kerem commented

2026-03-03 01:29:49 +03:00

Owner

Originally created by @ntimo on GitHub (Nov 13, 2019).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/721

Hello,
I would like to suggest to add a robots.txt to disallow all indexing of the bitwarden installation.

User-agent: *
Disallow: /

Originally created by @ntimo on GitHub (Nov 13, 2019). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/721 Hello, I would like to suggest to add a robots.txt to disallow all indexing of the bitwarden installation. ``` User-agent: * Disallow: / ```

kerem closed this issue

2026-03-03 01:29:50 +03:00

kerem commented

2026-03-03 01:29:51 +03:00

Author

Owner

@Jacobite89 commented on GitHub (Nov 14, 2019):

Setting the "X-Robots-Tag: none" HTTP-Header may be the better way.

e.g. this is my Caddyfile

#Caddyfile
vault.example.com {
  tls {$EMAIL}
  gzip

  header / {
    # Enable HTTP Strict Transport Security (HSTS)
    Strict-Transport-Security "max-age=31536000;"
    # Enable cross-site filter (XSS) and tell browser to block detected attacks
    X-XSS-Protection "1; mode=block"
    # Disallow the site to be rendered within a frame (clickjacking protection)
    X-Frame-Options "DENY"
    # Prevent search engines from indexing
    X-Robots-Tag "none"
  }

  # The negotiation endpoint is also proxied to Rocket
  proxy /notifications/hub/negotiate bitwarden:80 {
    transparent
  }

  # Notifications redirected to the websockets server
  proxy /notifications/hub bitwarden:3012 {
    websocket
  }

  # Proxy the Root directory to Rocket
  proxy / bitwarden:80 {
    transparent
  }
}

Source: https://developers.google.com/search/reference/robots_meta_tag?hl=en

@Jacobite89 commented on GitHub (Nov 14, 2019): Setting the "X-Robots-Tag: none" HTTP-Header may be the better way. e.g. this is my Caddyfile ``` #Caddyfile vault.example.com { tls {$EMAIL} gzip header / { # Enable HTTP Strict Transport Security (HSTS) Strict-Transport-Security "max-age=31536000;" # Enable cross-site filter (XSS) and tell browser to block detected attacks X-XSS-Protection "1; mode=block" # Disallow the site to be rendered within a frame (clickjacking protection) X-Frame-Options "DENY" # Prevent search engines from indexing X-Robots-Tag "none" } # The negotiation endpoint is also proxied to Rocket proxy /notifications/hub/negotiate bitwarden:80 { transparent } # Notifications redirected to the websockets server proxy /notifications/hub bitwarden:3012 { websocket } # Proxy the Root directory to Rocket proxy / bitwarden:80 { transparent } } ``` Source: https://developers.google.com/search/reference/robots_meta_tag?hl=en

kerem referenced this issue

2026-03-03 08:53:11 +03:00

[PR #868] [MERGED] Add backend support for alternate base dir (subdir/subpath) hosting #2811