If you are using WordPress for your website you can use Security Kit WordPress plugin to set this header and all other important headers as per the recommendations of owasp.