Added permissions policy to opt-out of Google FLoC (Federated Learning of Cohorts)

reverse-proxy.conf

@@ -72,6 +72,7 @@ server {
 
       # Set the security headers
 
+      add-header Permissions-Policy "interest-cohort=()"; # Don't allow Google FLoC
       add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; #HSTS
       add_header X-Frame-Options DENY; #Prevents clickjacking
       add_header X-Content-Type-Options nosniff; #Prevents mime sniffing

subdomain-proxy.conf

@@ -46,6 +46,7 @@ server {
 
       # Set the security headers
 
+      add-header Permissions-Policy "interest-cohort=()"; # Don't allow Google FLoC
       add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; #HSTS
       add_header X-Frame-Options DENY; #Prevents clickjacking
       add_header X-Content-Type-Options nosniff; #Prevents mime sniffing