# Leakey Journeys — crawl rules
# Public pages and assets are crawlable. Admin, secrets, and private data are not.

User-agent: *
Allow: /

# ── Public content Google needs to render JS-driven pages ──
Allow: /posts.json
Allow: /products.json
Allow: /team.json
Allow: /gallery.json
Allow: /videos.json
Allow: /newsletters.json
Allow: /publications.json
Allow: /fossil-publications.json
Allow: /css/
Allow: /js/
Allow: /images/
Allow: /ebooks/
Allow: /videos/

# ── Private / sensitive (must stay blocked for Google and others) ──
Disallow: /contacts.json
Disallow: /settings.json
Disallow: /newsletter_stats.json
Disallow: /latest-posts.json
Disallow: /seo_meta.json
Disallow: /media_alt_text.json
Disallow: /orders.dat
Disallow: /orders.json
Disallow: /data/
Disallow: /backups/
Disallow: /partials/
Disallow: /uploads/

# ── Admin & application endpoints ──
Disallow: /admin
Disallow: /admin-gate.php
Disallow: /admin.php
Disallow: /admin.html
Disallow: /admin-local.html
Disallow: /social-gate.php
Disallow: /logto-auth.php
Disallow: /logto-callback.php
Disallow: /logto-signout.php
Disallow: /cms-
Disallow: /bootstrap.php
Disallow: /lj-secrets
Disallow: /csrf-token.php
Disallow: /rate-limit.php
Disallow: /security-
Disallow: /setup-password.php
Disallow: /save_
Disallow: /upload_
Disallow: /delete_
Disallow: /list_
Disallow: /list-
Disallow: /load_
Disallow: /restore_
Disallow: /download_
Disallow: /api.php
Disallow: /integrations.php
Disallow: /send_
Disallow: /init_
Disallow: /manage_
Disallow: /generate_
Disallow: /compress_
Disallow: /move_
Disallow: /rename_
Disallow: /audit-
Disallow: /orders.php
Disallow: /paystack_
Disallow: /buffer-
Disallow: /system-health.php
Disallow: /security-health.php
Disallow: /password_reset
Disallow: /reset_password
Disallow: /unsubscribe.php

# Catch-all: do not index other PHP scripts
Disallow: /*.php$

# Private file types
Disallow: /*.dat$
Disallow: /*.jsonl$
Disallow: /*.log$

# Google-specific (same policy; explicit for Search Console clarity)
User-agent: Googlebot
Allow: /
Allow: /posts.json
Allow: /products.json
Allow: /team.json
Allow: /gallery.json
Allow: /videos.json
Allow: /newsletters.json
Allow: /publications.json
Allow: /fossil-publications.json
Allow: /css/
Allow: /js/
Allow: /images/
Disallow: /contacts.json
Disallow: /settings.json
Disallow: /newsletter_stats.json
Disallow: /data/
Disallow: /backups/
Disallow: /partials/
Disallow: /admin
Disallow: /admin-gate.php
Disallow: /admin.php
Disallow: /*.php$

User-agent: Googlebot-Image
Allow: /images/
Allow: /ebooks/
Disallow: /data/
Disallow: /backups/

Sitemap: https://leakeyjourneys.org/sitemap.xml