# craaft - https://craaft.io
User-agent: *
Allow: /

# The JSON API is auth-gated and has no crawl value. The OpenAPI document
# lives at /openapi.yaml, outside this prefix, and is deliberately crawlable.
Disallow: /api/

# App routes need a session. Crawling them only ever reaches the sign-in
# page, which wastes budget and produces near-duplicate results.
Disallow: /projects
Disallow: /board/
Disallow: /settings/
Disallow: /admin
Disallow: /verify-email
Disallow: /reset-password

# Public share links are readable by anyone holding the token, but they are
# somebody's board and should not be indexed.
Disallow: /share/

Sitemap: https://craaft.io/sitemap.xml