feat: add nofollow to non-prod environments

Author: alexislefebvre

.github/workflows/deploy.yml

@@ -95,6 +95,7 @@ jobs:
               echo "REPLICA=1" >> "$GITHUB_ENV"
               echo "NAMESPACE=nonprod-website" >> "$GITHUB_ENV"
               echo 'CORS=["https://${{ env.RELEASE_NAME}}.apip.preprod-tilleuls.ovh", "http://localhost", "https://localhost", "http://localhost:3000"]' >> "$GITHUB_ENV"
+              echo 'CADDY_X_ROBOTS_TAG="noindex, nofollow"' >> "$GITHUB_ENV"
           fi
       - name: HELM Deploy
         run: |
@@ -140,6 +141,7 @@ jobs:
               --set=github.key=${{ secrets.gh-key }} \
               --set=postgresql.global.postgresql.auth.password=$(openssl rand -base64 32 | tr -d "=+/") \
               --set=postgresql.global.postgresql.auth.username=website \
+              --set=caddy.xRobotsTag="${{ env.CADDY_X_ROBOTS_TAG }}" \
               | sed --unbuffered '/USER-SUPPLIED VALUES/,$d'
             else
               helm upgrade ${{ env.RELEASE_NAME }} ./helm/api-platform \
@@ -166,6 +168,7 @@ jobs:
                 --set=next.rootUrl=${{ env.URL }} \
                 --set=bucket.s3Upstream=storage.googleapis.com \
                 --set=bucket.s3Name=api-platform-website-v3 \
+                --set=caddy.xRobotsTag="${{ env.CADDY_X_ROBOTS_TAG }}" \
                 | sed --unbuffered '/USER-SUPPLIED VALUES/,$d'
             fi
       - name: Debug kube events

api/docker/caddy/Caddyfile

@@ -66,3 +66,5 @@ handle {
 
     reverse_proxy http://{$PWA_UPSTREAM}
 }
+
+header X-Robots-Tag "{$CADDY_X_ROBOTS_TAG}"

docker-compose.prod.yml

@@ -22,6 +22,7 @@ services:
     environment:
       MERCURE_PUBLISHER_JWT_KEY: ${CADDY_MERCURE_JWT_SECRET}
       MERCURE_SUBSCRIBER_JWT_KEY: ${CADDY_MERCURE_JWT_SECRET}
+      CADDY_X_ROBOTS_TAG: ${CADDY_X_ROBOTS_TAG}
 
   database:
     environment:

docker-compose.yml

@@ -39,6 +39,7 @@ services:
       SERVER_NAME: ${SERVER_NAME:-localhost}, caddy:80
       MERCURE_PUBLISHER_JWT_KEY: ${CADDY_MERCURE_JWT_SECRET:-!ChangeThisMercureHubJWTSecretKey!}
       MERCURE_SUBSCRIBER_JWT_KEY: ${CADDY_MERCURE_JWT_SECRET:-!ChangeThisMercureHubJWTSecretKey!}
+      CADDY_X_ROBOTS_TAG: ${CADDY_X_ROBOTS_TAG:-index}
     restart: unless-stopped
     volumes:
       - php_socket:/var/run/php

helm/api-platform/templates/configmap.yaml

@@ -15,3 +15,4 @@ data:
   next-root-url: {{ .Values.next.rootUrl | quote }}
   bucket-s3-upstream: {{ .Values.bucket.s3Upstream | quote }}
   bucket-s3-name: {{ .Values.bucket.s3Name | quote }}
+  x-robots-tag: {{ .Values.caddy.xRobotsTag | quote }}

helm/api-platform/templates/deployment.yaml

@@ -58,6 +58,11 @@ spec:
                 configMapKeyRef:
                   name: {{ include "api-platform.fullname" . }}
                   key: bucket-s3-name
+            - name: CADDY_X_ROBOTS_TAG
+              valueFrom:
+                configMapKeyRef:
+                  name: {{ include "api-platform.fullname" . }}
+                  key: x-robots-tag
           ports:
             - name: http
               containerPort: 80