add_header X-Frame-Options "DENY" always; location /new-headers { add_header X-Foo foo; }