Skip to content

Commit 92e195b

Browse files
Docs: adds robots.txt notice (#1208)
* adds robots.txt notice * runs prettier * Update content/docs/reference/routes/public-access.mdx Co-authored-by: Kenneth Jenkins <[email protected]> * Update content/docs/reference/routes/public-access.mdx Co-authored-by: Kenneth Jenkins <[email protected]> * Update content/docs/reference/routes/public-access.mdx Co-authored-by: Kenneth Jenkins <[email protected]> * Update content/docs/reference/routes/public-access.mdx Co-authored-by: Kenneth Jenkins <[email protected]> * rewrites text * fixes cspell typo --------- Co-authored-by: Kenneth Jenkins <[email protected]>
1 parent e8fd25b commit 92e195b

File tree

1 file changed

+17
-2
lines changed

1 file changed

+17
-2
lines changed

content/docs/reference/routes/public-access.mdx

+17-2
Original file line numberDiff line numberDiff line change
@@ -16,9 +16,24 @@ import TabItem from '@theme/TabItem';
1616

1717
## Summary
1818

19-
**Use with caution:** **Public Access** allows all requests for a given route, bypassing authentication and authorization. Suitable for publicly exposed web services.
19+
:::caution
2020

21-
If this setting is enabled, no whitelists (for example, Allowed Users) should be provided in this route.
21+
Because the **Public Access** setting bypasses authentication and authorization checks, you should enable it only for publicly exposed web services.
22+
23+
:::
24+
25+
The **Public Access** setting instructs Pomerium to grant unauthorized and unauthenticated access to all requests to the upstream service. If you enable this setting, no other policy should be provided for the route.
26+
27+
### Robots.txt behavior
28+
29+
By default, Pomerium serves a **robots.txt** response directly, instructing search engines _not_ to crawl the route domain:
30+
31+
```txt
32+
User-agent: *
33+
Disallow: /
34+
```
35+
36+
For routes with `allow_public_unauthenticated_access` enabled, Pomerium will not serve **robots.txt** directly. Instead, requests for `/robots.txt` will be proxied to the upstream service.
2237

2338
## How to configure
2439

0 commit comments

Comments
 (0)