Enable content security policy in nginx

I have a backend hosted in nginx server. I want to enable csp as header in the configuration and restrict unauthorised people from Iframing my pages. I already tried the code but some people are able to bypass it and manage to use it somehow. So please only if you have done such security or know how to implement apply this post.