What is the best place to put response security headers, Laravel app code or nginx?

As far as i understand, i can put response security headers(like X-Content-Type, X-Frame-Options) in laravel app or nginx. What is the best place for it. Advantages and drowbacks?