server {
  add_header X-Frame-Options "DENY" always;
  location / {
    location /some {
      add_header X-Frame-Options "DENY" always;
    }

    location /another {
      add_header X-Foo foo;
    }
  }
}