location / { set $frame_options ''; if ($http_referer !~ '^https?:\/\/([^\/]+\.)?(ekostroisk.ru|webvisor\.com|metri[ck]a\.yandex\.(com|ru|by|com\.tr))\/'){ set $frame_options 'SAMEORIGIN'; } add_header X-Frame-Options $frame_options; ... }