diff --git a/in/personal/server/index.rst b/in/personal/server/index.rst
index c694798..0a30db1 100644
--- a/in/personal/server/index.rst
+++ b/in/personal/server/index.rst
@@ -390,6 +390,7 @@ Security
  listen [::]:443 ssl http2;
  add_header Content-Security-Policy "default-src 'self'";
  add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload" always;
+ add_header X-Frame-Options "SAMEORIGIN";
 
 Sites
 ^^^^^