Lately I discovered that my instance is discoverable in search results when random people search on Google using my domain name. This should not be possible given that although the app is available over the internet, it is not intended for public access so should not be indexed by google and available in search results. So how do I stop this from happening going forward as it is a security risk.
This majorly happens for the home or login pages I guess. Internal desk/app pages are generally not indexed.
You can use the “no-index” option in meta tags or the HTTP header: