Security Headers

add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;

PHP-FPM

location ~ \.php$ {
    fastcgi_pass unix:/run/php/php8.3-fpm.sock;
}