From 6b8af4f801ec805f819e65e945b2fb51c8f48e06 Mon Sep 17 00:00:00 2001
From: Florian Heinz <mail@hnz.io>
Date: Sat, 11 Apr 2026 20:51:17 +0200
Subject: [PATCH] Hide the app from search engines

---
 robots.txt           | 2 ++
 src/App.php          | 1 +
 templates/layout.php | 1 +
 3 files changed, 4 insertions(+)
 create mode 100644 robots.txt

diff --git a/robots.txt b/robots.txt
new file mode 100644
index 0000000..1f53798
--- /dev/null
+++ b/robots.txt
@@ -0,0 +1,2 @@
+User-agent: *
+Disallow: /
diff --git a/src/App.php b/src/App.php
index 34402c6..e6049b6 100644
--- a/src/App.php
+++ b/src/App.php
@@ -594,6 +594,7 @@ final class App
         header('Referrer-Policy: strict-origin-when-cross-origin');
         header('X-Frame-Options: DENY');
         header('X-Content-Type-Options: nosniff');
+        header('X-Robots-Tag: noindex, nofollow, noarchive, nosnippet');
         header('Cross-Origin-Opener-Policy: same-origin');
         header('Permissions-Policy: camera=(), microphone=(), geolocation=()');
         header("Content-Security-Policy: default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'");
diff --git a/templates/layout.php b/templates/layout.php
index 6edea45..c42ebcd 100644
--- a/templates/layout.php
+++ b/templates/layout.php
@@ -18,6 +18,7 @@ $brandSubtitle = match ($page) {
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta name="theme-color" content="#0b1e2e">
+    <meta name="robots" content="noindex, nofollow, noarchive, nosnippet">
     <title><?= e($pageTitle) ?> · Mood</title>
     <link rel="icon" type="image/svg+xml" href="/assets/branding/favicon.svg">
     <link rel="shortcut icon" href="/assets/branding/favicon.svg">