xoxys.nginx/templates/etc/nginx/conf.d/header.conf.j2

# {{ ansible_managed }}
# default header settings
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";