depends on how exactly you have things deployed, but I just added to the nginx config:
map $http_sec_ch_ua $block_lightpanda {
default 0;
~*Lightpanda 1;
}
and then in the server { } block:
if ($block_lightpanda) {
return 403;
}