I need to add a header
add_header Content-Security-Policy "default-src 'self'; font-src *;img-src * data:; script-src *; style-src *";
Setting this inside the server block in the website's conf, or in Nginx conf both fail. Please advise on the correct file/position to add a modified header.