From 02ac19935acd2ed1ac53e7e685669d02869a4ed3 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Sat, 18 Jul 2026 11:38:42 -0300
Subject: [PATCH] vault: discourage public indexing

---
 services/vault/middleware.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/services/vault/middleware.yaml b/services/vault/middleware.yaml
index 312b9774e..67c2cb257 100644
--- a/services/vault/middleware.yaml
+++ b/services/vault/middleware.yaml
@@ -25,7 +25,11 @@ spec:
   headers:
     customResponseHeaders:
       Server: ""
+      Cross-Origin-Resource-Policy: same-origin
+      X-Download-Options: noopen
+      X-Permitted-Cross-Domain-Policies: none
       X-Powered-By: ""
+      X-Robots-Tag: "noindex, nofollow, noarchive"
       X-Vault-Cluster: ""
       X-Vault-Index: ""
       X-Vault-Known-Leader: ""