add_header X-Frame-Options "DENY" always; server "some"; add_header X-Foo foo;