Opt out of FLoC globally

In nginx-proxy, add a permissions-policy header that opts out of
Google's Federated Learning of Cohorts (FLoC).

roles/docker/files/configs/nginx-proxy/conf.d/anti-floc.conf

@@ -0,0 +1,2 @@
+# See https://developer.chrome.com/blog/floc/#how-can-websites-opt-out-of-the-floc-computation
+add_header Permissions-Policy "interest-cohort=()";

roles/docker/tasks/services/nginx-proxy.yml

@@ -45,3 +45,7 @@
     env:
       NGINX_PROXY_CONTAINER: nginx-proxy
 
+- name: upload nginx anti floc
+  copy:
+    src: files/configs/nginx-proxy/conf.d/anti-floc.conf
+    dst: "{{ nginx.volume_folder }}/conf/anti-floc.conf"