User-agent: *
# Info disclosure: robots.txt enumerates sensitive paths (detected by recon /
# path_scan). These "hidden" paths are exactly where the interesting stuff is.
Disallow: /admin
Disallow: /backup
Disallow: /.env.bak
Disallow: /config.json.bak
Disallow: /.git/
Disallow: /api/
Disallow: /internal/