Google's new Federated Learning of Cohorts (FLoC) will read user's browser history and assign them to cohorts to track them unless we set this header.
Always add security headers, not just for successful HTTP response codes. See the nginx `add_header` docs.
See: https://github.com/h5bp/server-configs-nginx/blob/master/h5bp/directive-only/extra-security.conf See: https://www.owasp.org/index.php/List_of_useful_HTTP_headers Signed-off-by: Alan Orth <alan.orth@gmail.com>