docs: explain how to disabl FLoC (#152)

This commit is contained in:
Kévin Dunglas 2021-04-16 19:36:28 +02:00 committed by GitHub
parent bd9d8eaf71
commit 371993227e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -51,10 +51,13 @@ Replace `http://` with `https://` in any Location header:
header Location http:// https:// header Location http:// https://
``` ```
Set security headers on all pages: (**WARNING:** only use if you understand the implications!) Set security and privacy headers on all pages: (**WARNING:** only use if you understand the implications!)
```caddy-d ```caddy-d
header { header {
# disable FLoC tracking
Permissions-Policy interest-cohort=()
# enable HSTS # enable HSTS
Strict-Transport-Security max-age=31536000; Strict-Transport-Security max-age=31536000;