Also, you should probably prevent web crawlers from indexing your page if you don't want that via the robots.txt. This should probably be configurable via a env var in the future:
User-agent: *
Disallow: /
Originally posted by @schlagmichdoch in #463
To increase the privacy of admins hosting their own instance, the robots.txt should probably be set to disallow everthing and only allow crawling dynamically by using an optional env var DISALLOW_ROBOTS=FALSE.