Thank you that worked :)
After some experimentation It turned out that Nginx security headers already does what I needed, but nevertheless it's good knowing how to do this
After some experimentation It turned out that Nginx security headers already does what I needed, but nevertheless it's good knowing how to do this