infrastructure/ansible/roles/traefik/files/file-provider-main.yml

http:
  middlewares:
    compress:
      compress: {}

    # https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network
    floc-block:
      headers:
        customResponseHeaders:
          Permissions-Policy: interest-cohort=()

    tailscale-only:
      ipAllowList:
        sourceRange:
          - "{{ tailscale_cidr }}"
          - "{{ tailscale_cidr_ipv6 }}"
Add traefik config 2020-02-02 21:10:29 +00:00			`http:`
			`middlewares:`
GZIP plausible traffic Plausible doesn't gzip for itself. Funnily enough the tracker is actually too small to be compressed by Traefik! 2020-07-22 12:18:49 +01:00			`compress:`
			`compress: {}`
FLoC Block https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network 2021-04-18 22:19:24 +01:00
			`# https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network`
			`floc-block:`
			`headers:`
			`customResponseHeaders:`
			`Permissions-Policy: interest-cohort=()`
Allow only exposing services over Tailscale This works using public DNS, so doesn't need Tailscale's magic DNS to override my local. 2024-03-07 22:30:10 +00:00
			`tailscale-only:`
			`ipAllowList:`
			`sourceRange:`
			`- "{{ tailscale_cidr }}"`
			`- "{{ tailscale_cidr_ipv6 }}"`