diff --git a/fly/nginx.conf b/fly/nginx.conf
index 75cd102..995042e 100644
--- a/fly/nginx.conf
+++ b/fly/nginx.conf
@@ -155,6 +155,12 @@ http {
             internal;
         }
 
+        # Serve robots.txt directly — block crawlers from mirror repos
+        location = /robots.txt {
+            default_type text/plain;
+            return 200 "User-agent: *\nDisallow: /mirrors/\n";
+        }
+
         # Block swagger API docs — use forge.ops.eblu.me from tailnet
         location /swagger {
             return 403 "API documentation is only available at forge.ops.eblu.me (tailnet).\n";