Merge pull request #378 from AmazeeLabs/SLB-478-noindex

chore(SLB-478): noindex template apps

apps/preview/server/index.ts

@@ -32,6 +32,12 @@ if (isSessionRequired()) {
 // Authentication middleware based on the configuration.
 const authMiddleware = getAuthenticationMiddleware();
 
+// Prevent indexing.
+app.use((_, res, next) => {
+  res.setHeader('X-Robots-Tag', 'noindex, nofollow');
+  next();
+});
+
 app.get('/endpoint.js', (_, res) => {
   res.send(
     `window.GRAPHQL_ENDPOINT = "${

apps/publisher/package.json

@@ -2,7 +2,7 @@
   "name": "@custom/publisher",
   "private": true,
   "dependencies": {
-    "@amazeelabs/publisher": "^2.5.9",
+    "@amazeelabs/publisher": "^2.5.10",
     "typescript": "^5.7.3"
   },
   "scripts": {

apps/website/gatsby-config.mjs

@@ -12,6 +12,8 @@ process.env.CLOUDINARY_API_KEY = process.env.CLOUDINARY_API_KEY || 'test';
 process.env.CLOUDINARY_API_SECRET = process.env.CLOUDINARY_API_SECRET || 'test';
 process.env.CLOUDINARY_CLOUDNAME = process.env.CLOUDINARY_CLOUDNAME || 'demo';
 
+process.env.NOINDEX = process.env.NOINDEX || 'false';
+
 /**
  *
  * @type {import('gatsby').GatsbyConfig['plugins']}
@@ -42,6 +44,12 @@ const plugins = [
     options: {
       // To avoid "X-Frame-Options: DENY" in Drupal iframes.
       mergeSecurityHeaders: false,
+      headers:
+        process.env.NOINDEX === 'true'
+          ? {
+              '/*': ['X-Robots-Tag: noindex, nofollow'],
+            }
+          : {},
     },
   },
   {
@@ -50,7 +58,10 @@ const plugins = [
   {
     resolve: 'gatsby-plugin-robots-txt',
     options: {
-      policy: [{ userAgent: '*', allow: '/', disallow: [] }],
+      policy:
+        process.env.NOINDEX === 'true'
+          ? [{ userAgent: '*', disallow: '/' }]
+          : [{ userAgent: '*', allow: '/', disallow: [] }],
     },
   },
   {

packages/drupal/custom/custom.services.yml

@@ -16,3 +16,8 @@ services:
     arguments: ['@language_manager', '@current_route_match']
     tags:
       - { name: event_subscriber }
+
+  custom.event_subscriber:
+    class: Drupal\custom\EventSubscriber\RobotsSubscriber
+    tags:
+      - { name: event_subscriber }

packages/drupal/custom/src/EventSubscriber/RobotsSubscriber.php

@@ -0,0 +1,36 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Drupal\custom\EventSubscriber;
+
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Symfony\Component\HttpKernel\Event\RequestEvent;
+use Symfony\Component\HttpKernel\Event\ResponseEvent;
+use Symfony\Component\HttpKernel\KernelEvents;
+
+/**
+ * Prevents any Drupal page to be indexed by search engines.
+ *
+ * Additional measure as robots.txt could be overridden by a scaffold process.
+ */
+final class RobotsSubscriber implements EventSubscriberInterface {
+
+  /**
+   * Kernel response event handler.
+   */
+  public function onKernelResponse(ResponseEvent $event): void {
+    $response = $event->getResponse();
+    $response->headers->set('X-Robots-Tag', 'noindex, nofollow');
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  public static function getSubscribedEvents(): array {
+    return [
+      KernelEvents::RESPONSE => ['onKernelResponse'],
+    ];
+  }
+
+}