http:
  middlewares:
    lan-whitelist:
      ipWhitelist:
        sourceRange:
          - 10.0.0.0/24
          - 10.0.2.0/24
          - 10.10.10.0/24
          - 172.16.0.0/12
          - 172.18.0.0/12

    secure-headers:
      headers:
        customFrameOptionsValue: SAMEORIGIN
        forceSTSHeader: true
        stsSeconds: 15552000
        stsPreload: true
        customResponseHeaders:
          Permissions-Policy: interest-cohort() # Opts out of Google's FLoC network. See https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network
          X-Robots-Tag: noindex,nofollow