User-agent: *
Disallow: /admin
Disallow: /api/

# The public read endpoints behind /blog. Google's renderer will not fetch a
# robots-disallowed URL, so blocking these made every /blog/{slug} render fall
# into BlogPostPage's soft-404 branch — which used to emit noindex, and Search
# Console indexes the RENDERED DOM, not the prerendered HTML. That is how four
# live posts ended up "Excluded by 'noindex' tag" (2026-09-01).
Allow: /api/posts

Sitemap: https://hiroska.com/sitemap.xml