# PIG is not public yet. Nothing here should be indexed or crawled.
#
# This is a request, not enforcement — well-behaved crawlers honour it, and
# hostile ones do not. The real gate is authentication: every route below /
# returns the sign-in screen to an unauthenticated visitor and every /api/
# route returns 401. This file exists so the app does not accumulate a search
# footprint before it is meant to have one.
#
# Backed by an `X-Robots-Tag: noindex, nofollow` response header in the Caddy
# config and a <meta name="robots"> tag in index.html. The header is the one
# that matters most: it also covers og.png, the manifest and anything else
# served that is not HTML.
#
# To go public: delete this file, remove the meta tag, and drop the header.

User-agent: *
Disallow: /