Nginx Security Headers: default-src 'none' & base-uri 'self'

[meganie]

I'm using Nginx as a reverse proxy and I try to set a CSP but I can't figure out how to set default-src 'none' and base-uri 'self'
Maybe someone could point me in the right direction.