diff --git a/ansible/roles/traefik/files/file-provider-main.yml b/ansible/roles/traefik/files/file-provider-main.yml
index 938102e..929795b 100644
--- a/ansible/roles/traefik/files/file-provider-main.yml
+++ b/ansible/roles/traefik/files/file-provider-main.yml
@@ -5,3 +5,9 @@ http:
         scheme: https
     compress:
       compress: {}
+
+    # https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network
+    floc-block:
+      headers:
+        customResponseHeaders:
+          Permissions-Policy: interest-cohort=()
diff --git a/ansible/roles/traefik/files/traefik.yml b/ansible/roles/traefik/files/traefik.yml
index c2282af..b9c4d03 100644
--- a/ansible/roles/traefik/files/traefik.yml
+++ b/ansible/roles/traefik/files/traefik.yml
@@ -16,6 +16,7 @@ entryPoints:
     http:
       middlewares:
         - tls-redirect@file
+        - floc-block@file
     proxyProtocol:
       trustedIPs:
         - "{{ wireguard.cidr }}"