nginx security headers

Hi there, I implemented today successful the security headers for: • X-Content-Type-Options • X-XSS-Protection • Referrer-Policy • Strict-Transport-Security But the last two headers Content-Security-Policy and X-Frame-Options break my head all afternoon. For X-Frame-Options I tried all...