From 1a42b859266ec7560a0c77f8fb26e04185702f6e Mon Sep 17 00:00:00 2001
From: Brian Cunnie <brian.cunnie@gmail.com>
Date: Wed, 29 May 2024 08:18:48 -0700
Subject: [PATCH] Warn developers to not index their sites

The sslip.io service has been abused by scammers and phishers who create
sites that masquerade as legitimate sites. For example,
<https://nf-43-134-66-67.sslip.io/sg> masqueraded as Netflix.

To combat this, we've undertaken to block all sites that masquerade as a
legitimate sites, but this had the unfortunate consequence of ensnaring
a legitimate staging site (th-ab.de).

This commit assists developers by updating the documentation to warn
developers not to index their staging site.

[#53]
---
 k8s/document_root_sslip.io/index.html | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/k8s/document_root_sslip.io/index.html b/k8s/document_root_sslip.io/index.html
index 0f6b24b..b036e26 100644
--- a/k8s/document_root_sslip.io/index.html
+++ b/k8s/document_root_sslip.io/index.html
@@ -108,6 +108,14 @@ src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script> <![endif]-->
           </tr>
         </tbody>
       </table>
+      <div class="alert alert-warning" role="alert">
+        <b>Developers: disable indexing of your staging site to avoid being blocked</b> (we block by disabling
+        resolution of your sslip.io hostname); disable indexing by either including the <code>X-Robots-Tag:
+        noindex</code> in your HTTP headers or include a <code>robots.txt</code> at the root of your website with the
+        following contents:<code><br>
+        User-agent: *<br>
+        Disallow: /</code>
+      </div>
       <h3 id="branding">Branding / White Label / Custom Domains</h3>
       <p>sslip.io can be used to brand your own site (you don’t need to use the sslip.io domain). For example, say you
       own the domain “example.com”, and you want your subdomain, “xip.example.com” to have xip.io-style features. To
@@ -152,9 +160,9 @@ src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script> <![endif]-->
       <pre><code>169.254.169.254</code></pre>
       <h3 id="server">But I Want My Own DNS Server!</h3>
       <p>If you want to run your own DNS server, it's simple: you can compile from <a href=
-      "https://github.com/cunnie/sslip.io">source</a> or you can use one of our
-      <a href="https://github.com/cunnie/sslip.io/releases">pre-built binaries</a>. In the following example, we
-      install & run our server within a docker container:</p>
+      "https://github.com/cunnie/sslip.io">source</a> or you can use one of our <a href=
+      "https://github.com/cunnie/sslip.io/releases">pre-built binaries</a>. In the following example, we install & run
+      our server within a docker container:</p>
       <pre>
 docker run -it --rm fedora
 curl -L https://github.com/cunnie/sslip.io/releases/download/3.1.0/sslip.io-dns-server-linux-amd64 -o dns-server