all: opt out of FLoC

Eat shit, Google
This commit is contained in:
Drew DeVault 2021-04-15 10:44:09 -04:00
parent cdd5504293
commit 6bca57a2da
10 changed files with 30 additions and 0 deletions

View File

@ -20,8 +20,11 @@ server {
ssl_certificate /etc/ssl/uacme/builds.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/builds.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;

View File

@ -19,8 +19,11 @@ server {
ssl_certificate /etc/ssl/uacme/dispatch.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/dispatch.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/html text/css;

View File

@ -20,8 +20,11 @@ server {
ssl_certificate /etc/ssl/uacme/git.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/git.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self' 'unsafe-inline'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;

View File

@ -20,8 +20,11 @@ server {
ssl_certificate /etc/ssl/uacme/hg.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/hg.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css;

View File

@ -23,8 +23,11 @@ server {
ssl_certificate /etc/ssl/uacme/sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;

View File

@ -19,8 +19,11 @@ server {
ssl_certificate /etc/ssl/uacme/lists.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/lists.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/html text/css;

View File

@ -20,8 +20,11 @@ server {
ssl_certificate /etc/ssl/uacme/man.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/man.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;

View File

@ -23,8 +23,11 @@ server {
ssl_certificate /etc/ssl/uacme/meta.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/meta.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self' 'unsafe-inline' *.stripe.com *.stripe.network; frame-src *.stripe.com *.stripe.network" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;

View File

@ -20,8 +20,11 @@ server {
ssl_certificate /etc/ssl/uacme/paste.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/paste.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self' 'unsafe-inline'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;

View File

@ -20,8 +20,11 @@ server {
ssl_certificate /etc/ssl/uacme/todo.sr.ht/cert.pem;
ssl_certificate_key /etc/ssl/uacme/private/todo.sr.ht/key.pem;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;