From b6997959e929d8375a19a7b1c832529fd579a213 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Pedro=20Toledo?= <joao.goncalves@itguys.com.br>
Date: Wed, 4 Feb 2026 19:24:03 -0300
Subject: [PATCH] feat: Adiciona snippets well-known (robots, security, humans,
 ads)

---
 snippets/ads.txt.conf      | 13 +++++++++++++
 snippets/humans.txt.conf   | 13 +++++++++++++
 snippets/robots.txt.conf   | 16 ++++++++++++++++
 snippets/security.txt.conf | 13 +++++++++++++
 snippets/well_known.conf   |  7 +++++++
 5 files changed, 62 insertions(+)
 create mode 100644 snippets/ads.txt.conf
 create mode 100644 snippets/humans.txt.conf
 create mode 100644 snippets/robots.txt.conf
 create mode 100644 snippets/security.txt.conf
 create mode 100644 snippets/well_known.conf

diff --git a/snippets/ads.txt.conf b/snippets/ads.txt.conf
new file mode 100644
index 0000000..dced4c4
--- /dev/null
+++ b/snippets/ads.txt.conf
@@ -0,0 +1,13 @@
+# Ads.txt - Vendedores Autorizados de Anúncios
+# Função: Lista quem está autorizado a vender o inventário de anúncios do site para evitar fraudes.
+location = /ads.txt {
+    allow all;
+    log_not_found off;
+    access_log off;
+    try_files /ads.txt @proxy_ads;
+}
+
+location @proxy_ads {
+    include snippets/proxy_params.conf;
+    proxy_pass $upstream_proto://$upstream_app;
+}
diff --git a/snippets/humans.txt.conf b/snippets/humans.txt.conf
new file mode 100644
index 0000000..2dbf0ba
--- /dev/null
+++ b/snippets/humans.txt.conf
@@ -0,0 +1,13 @@
+# Humans.txt - Créditos e Tecnologias
+# Função: Um arquivo para humanos que lista quem construiu o site e as ferramentas usadas.
+location = /humans.txt {
+    allow all;
+    log_not_found off;
+    access_log off;
+    try_files /humans.txt @proxy_humans;
+}
+
+location @proxy_humans {
+    include snippets/proxy_params.conf;
+    proxy_pass $upstream_proto://$upstream_app;
+}
diff --git a/snippets/robots.txt.conf b/snippets/robots.txt.conf
new file mode 100644
index 0000000..c5ba7fc
--- /dev/null
+++ b/snippets/robots.txt.conf
@@ -0,0 +1,16 @@
+# Robots.txt - Controle de Crawler
+# Função: Indica para robôs (Google, Bing, IA) o que pode ou não ser indexado.
+location = /robots.txt {
+    allow all;
+    log_not_found off;
+    access_log off;
+    # Exemplo de conteúdo direto (opcional):
+    # return 200 "User-agent: *\nDisallow: /admin/\nSitemap: $scheme://$host/sitemap.xml";
+    try_files /robots.txt @proxy_robots;
+}
+
+location @proxy_robots {
+    # Caso não exista no proxy, tenta buscar no backend
+    include snippets/proxy_params.conf;
+    proxy_pass $upstream_proto://$upstream_app;
+}
diff --git a/snippets/security.txt.conf b/snippets/security.txt.conf
new file mode 100644
index 0000000..c367a31
--- /dev/null
+++ b/snippets/security.txt.conf
@@ -0,0 +1,13 @@
+# Security.txt - Reporte de Vulnerabilidades
+# Função: Padroniza como pesquisadores de segurança devem contatar o responsável pelo site.
+location = /.well-known/security.txt {
+    allow all;
+    log_not_found off;
+    access_log off;
+    try_files /.well-known/security.txt /security.txt @proxy_security;
+}
+
+location @proxy_security {
+    include snippets/proxy_params.conf;
+    proxy_pass $upstream_proto://$upstream_app;
+}
diff --git a/snippets/well_known.conf b/snippets/well_known.conf
new file mode 100644
index 0000000..79e83f9
--- /dev/null
+++ b/snippets/well_known.conf
@@ -0,0 +1,7 @@
+# Agregador de Arquivos de Identificação e Controle (Well-Known / Root Files)
+# Função: Inclui todos os snippets padrão de identificação em um único comando.
+
+include snippets/robots.txt.conf;
+include snippets/security.txt.conf;
+include snippets/humans.txt.conf;
+include snippets/ads.txt.conf;