User-agent: *
# Admin panel and API (Filament path 'admin', routes/api.php, extension API groups)
Disallow: /admin
Disallow: /api/
Disallow: /oauth/
# Login, registration, password reset request, email verification notice, 2FA
# carry their own noindex,follow meta tag (see nano theme's auth Livewire
# components) and must stay crawlable for search engines to see and act on
# that tag - a page a crawler can't fetch can't be deindexed by it, it just
# leaves the old already-indexed entry orphaned. Disallow here would undo that.
# The token-bearing subpaths stay disallowed: /password/reset/{token} and the
# signed /email/verify/{id}/{hash} link (which verifies the email on GET) must
# never be crawled.
Disallow: /password/reset/
Disallow: /email/verify/
# Customer area (all require auth)
Disallow: /dashboard
Disallow: /account
Disallow: /invoices
Disallow: /tickets
Disallow: /services
Disallow: /my-quotes
Disallow: /my-quote-requests
Disallow: /request-quote
# Cart and checkout (product and category pages stay crawlable)
Disallow: /cart
Disallow: /products/*/*/checkout
# Private tokenized links, payment webhooks, analytics opt-out
Disallow: /quote/
Disallow: /extensions/
Disallow: /ph-opt-out

# Sitemaps (storefront, then static blog)
Sitemap: https://omnehosting.com/sitemap.xml
Sitemap: https://omnehosting.com/blog/sitemap-index.xml