about summary refs log tree commit diff
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2021-04-16T10·48+0200
committertazjin <mail@tazj.in>2021-04-20T10·44+0000
commit54f59a5cc5835932c62c0f2d58712e30c248da4d (patch)
tree0cc2986c56d76c3f7a9ac42201f22d46389edced
parentb75dd136cbfccdd27dd836eea92aeda5569699fd (diff)
feat(ops/modules/www): Disable FLoC tracking for all TVL pages r/2529
.. this is actually likely not disabling it for some pages, that will
need this to be copy & pasted, but it's hard to tell just from the
nginx docs. We'll make sure after deploying.

Change-Id: I2fa6e31ca10835a206673b858594fa071e729d82
Reviewed-on: https://cl.tvl.fyi/c/depot/+/3020
Tested-by: BuildkiteCI
Reviewed-by: lukegb <lukegb@tvl.fyi>
-rw-r--r--ops/modules/www/base.nix4
1 files changed, 4 insertions, 0 deletions
diff --git a/ops/modules/www/base.nix b/ops/modules/www/base.nix
index 4b956cd95e..cfa9bf0bc6 100644
--- a/ops/modules/www/base.nix
+++ b/ops/modules/www/base.nix
@@ -9,6 +9,10 @@
       recommendedTlsSettings = true;
       recommendedGzipSettings = true;
       recommendedProxySettings = true;
+
+      appendHttpConfig = ''
+        add_header Permissions-Policy "interest-cohort=()";
+      '';
     };
 
     # NixOS 20.03 broke nginx and I can't be bothered to debug it