Everything should be made as simple as possible, but not simpler.
03:00
location / { set $frame_options ''; if ($http_referer !~ '^https?:\/\/([^\/]+\.)?(nm-academy.kz\.com|webvisor\.com|metri[ck]a\.yandex\.(com|ru|by|com\.tr))\/'){ set $frame_options 'SAMEORIGIN'; } add_header X-Frame-Options $frame_options; ... }