From 03affd269f642a677bd0fc3455a6c9dea1b95fff Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Sun, 18 Apr 2021 22:19:24 +0100
Subject: [PATCH] FLoC Block

https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network
---
 ansible/roles/traefik/files/file-provider-main.yml | 6 ++++++
 ansible/roles/traefik/files/traefik.yml            | 1 +
 2 files changed, 7 insertions(+)

diff --git a/ansible/roles/traefik/files/file-provider-main.yml b/ansible/roles/traefik/files/file-provider-main.yml
index 938102e..929795b 100644
--- a/ansible/roles/traefik/files/file-provider-main.yml
+++ b/ansible/roles/traefik/files/file-provider-main.yml
@@ -5,3 +5,9 @@ http:
         scheme: https
     compress:
       compress: {}
+
+    # https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network
+    floc-block:
+      headers:
+        customResponseHeaders:
+          Permissions-Policy: interest-cohort=()
diff --git a/ansible/roles/traefik/files/traefik.yml b/ansible/roles/traefik/files/traefik.yml
index c2282af..b9c4d03 100644
--- a/ansible/roles/traefik/files/traefik.yml
+++ b/ansible/roles/traefik/files/traefik.yml
@@ -16,6 +16,7 @@ entryPoints:
     http:
       middlewares:
         - tls-redirect@file
+        - floc-block@file
     proxyProtocol:
       trustedIPs:
         - "{{ wireguard.cidr }}"