# ==============================
# robots.txt for Your Laravel App
# ==============================

# Block all sensitive/admin/user routes
User-agent: *
Disallow: /admin/
Disallow: /user/
Disallow: /login
Disallow: /registration
Disallow: /forgot-password
Disallow: /reset-password
Disallow: /verify-otp
Disallow: /onboarding

# Block signed/download routes
Disallow: /user/tax-refund/download/

# Allow everything else (public pages)
Allow: /

# Sitemap (if you have one)
Sitemap: https://yourdomain.com/sitemap.xml
