Google invented a new way to track users with Chrome, but give us a way to opt out as web developer. For this, we need to add this to all our apache confs (or even better the default apache configuration).
<IfModule mod_headers.c> Header always set Permissions-Policy: interest-cohort=() </IfModule>
I think the best place to put this is our secure-ssl.conf. This is not related to SSL, but we already have other headers like X-Frame-Options set there too.
Could you send a MR? https://invent.kde.org/sysadmin/kde-ansible/-/blob/master/roles/apache/templates/secure-ssl.conf
(yes, the always/onsuccess stuff is weird, I didn't want to change it from status quo when I put the file into ansible, but I should revisit it...)
I agree the best place to put this is secure-ssl.conf - and have now deployed this change to our servers.