robots.txt: dissalow all

void.nix

@@ -383,7 +383,16 @@
   ];
 
   # reverse proxy
-  services.nginx = {
+  services.nginx = let
+    robots = {
+      locations."/robots.txt" = {
+        extraConfig = ''
+          add_header Content-Type text/plain;
+          return 200 "User-Agent: *\nDisallow: /";
+        '';
+      };
+    };
+  in {
     enable = true;
     recommendedTlsSettings = true;
     recommendedOptimisation = true;
@@ -395,73 +404,87 @@
       access_log syslog:server=unix:/dev/log combined;
     '';
     virtualHosts = {
-      "void.hummingbird-stork.ts.net" = {
+      "void.hummingbird-stork.ts.net" =
-        locations."/".proxyPass = "http://localhost:8096";
+        robots
-      };
+        // {
-      "jellyfin.005540.xyz" = {
+          locations."/".proxyPass = "http://localhost:8096";
-        locations."/".proxyPass = "http://localhost:8096";
+        };
-        enableACME = true;
+      "jellyfin.005540.xyz" =
-        forceSSL = true;
+        robots
-      };
+        // {
-      "forgejo.005540.xyz" = {
+          locations."/".proxyPass = "http://localhost:8096";
-        locations."/".proxyPass = "http://localhost:3000";
+          enableACME = true;
-        enableACME = true;
+          forceSSL = true;
-        forceSSL = true;
+        };
-      };
+      "forgejo.005540.xyz" =
-      "miniflux.005540.xyz" = {
+        robots
-        locations."/".proxyPass = "http://localhost:8700";
+        // {
-        enableACME = true;
+          locations."/".proxyPass = "http://localhost:3000";
-        forceSSL = true;
+          enableACME = true;
-      };
+          forceSSL = true;
-      "paperless.005540.xyz" = {
+        };
-        locations."/".proxyPass = "http://localhost:28981";
+      "miniflux.005540.xyz" =
-        enableACME = true;
+        robots
-        forceSSL = true;
+        // {
-      };
+          locations."/".proxyPass = "http://localhost:8700";
-      "immich.005540.xyz" = {
+          enableACME = true;
-        locations."/".proxyPass = "http://localhost:2283";
+          forceSSL = true;
-        locations."/".proxyWebsockets = true;
+        };
-        extraConfig = ''
+      "paperless.005540.xyz" =
-          client_max_body_size 50000M;
+        robots
-          proxy_read_timeout   600s;
+        // {
-          proxy_send_timeout   600s;
+          locations."/".proxyPass = "http://localhost:28981";
-          send_timeout         600s;
+          enableACME = true;
-        '';
+          forceSSL = true;
-        enableACME = true;
+        };
-        forceSSL = true;
+      "immich.005540.xyz" =
-      };
+        robots
-      "audiobookshelf.005540.xyz" = {
+        // {
-        locations."/".proxyPass = "http://localhost:8000";
+          locations."/".proxyPass = "http://localhost:2283";
-        locations."/".proxyWebsockets = true;
+          locations."/".proxyWebsockets = true;
-        enableACME = true;
+          extraConfig = ''
-        forceSSL = true;
+            client_max_body_size 50000M;
-      };
+            proxy_read_timeout   600s;
-      "victorialogs.005540.xyz" = {
+            proxy_send_timeout   600s;
-        locations."/".proxyPass = "http://localhost:9428";
+            send_timeout         600s;
-        locations."/".basicAuthFile = "/etc/nixos/secrets/victorialogs/basicauth";
+          '';
-        enableACME = true;
+          enableACME = true;
-        forceSSL = true;
+          forceSSL = true;
-      };
+        };
-      "nextcloud.005540.xyz" = {
+      "victorialogs.005540.xyz" =
-        locations."/".proxyWebsockets = true;
+        robots
-        locations."/whiteboard/" = {
+        // {
-          proxyWebsockets = true;
+          locations."/".proxyPass = "http://localhost:9428";
-          proxyPass = "http://localhost:3002/";
+          locations."/".basicAuthFile = "/etc/nixos/secrets/victorialogs/basicauth";
+          enableACME = true;
+          forceSSL = true;
+        };
+      "nextcloud.005540.xyz" =
+        robots
+        // {
+          locations."/".proxyWebsockets = true;
+          locations."/whiteboard/" = {
+            proxyWebsockets = true;
+            proxyPass = "http://localhost:3002/";
+          };
+          enableACME = true;
+          forceSSL = true;
+        };
+      "copyparty.005540.xyz" =
+        robots
+        // {
+          locations."/".proxyPass = "http://localhost:3004";
+          enableACME = true;
+          forceSSL = true;
+        };
+      "food-tracker.005540.xyz" =
+        robots
+        // {
+          locations."/".proxyPass = "http://localhost:3001";
+          locations."/".basicAuthFile = "/etc/nixos/secrets/food-tracker/basicauth";
+          enableACME = true;
+          forceSSL = true;
         };
-        enableACME = true;
-        forceSSL = true;
-      };
-      "copyparty.005540.xyz" = {
-        locations."/".proxyPass = "http://localhost:3004";
-        enableACME = true;
-        forceSSL = true;
-      };
-      "food-tracker.005540.xyz" = {
-        locations."/".proxyPass = "http://localhost:3001";
-        locations."/".basicAuthFile = "/etc/nixos/secrets/food-tracker/basicauth";
-        enableACME = true;
-        forceSSL = true;
-      };
     };
   };
 }