From 6a88040826929de44cf3bd948da1d0a5973d3aaa Mon Sep 17 00:00:00 2001
From: Franziska Kunsmann <hi@kunsmann.eu>
Date: Fri, 16 Apr 2021 18:36:50 +0200
Subject: [PATCH] bundles/nginx: disable Federated Learning of Cohorts for all
 hosts

---
 bundles/c3voc-addons/files/site_template | 2 ++
 bundles/nginx/files/site_template        | 1 +
 2 files changed, 3 insertions(+)

diff --git a/bundles/c3voc-addons/files/site_template b/bundles/c3voc-addons/files/site_template
index e274a90..04abd85 100644
--- a/bundles/c3voc-addons/files/site_template
+++ b/bundles/c3voc-addons/files/site_template
@@ -26,6 +26,8 @@ server {
     client_max_body_size 5M;
 % endif
 
+    add_header Permissions-Policy interest-cohort=();
+
     location /.well-known/acme-challenge/ {
         alias /var/www/dehydrated;
     }
diff --git a/bundles/nginx/files/site_template b/bundles/nginx/files/site_template
index cfcbe98..d4e4c83 100644
--- a/bundles/nginx/files/site_template
+++ b/bundles/nginx/files/site_template
@@ -42,6 +42,7 @@ server {
     add_header X-Content-Type-Options nosniff;
     add_header X-XSS-Protection "1; mode=block";
 % endif
+    add_header Permissions-Policy interest-cohort=();
 
     location /.well-known/acme-challenge/ {
         alias /var/lib/dehydrated/acme-challenges/;