An nginx configuration to block referers except valid ones.

nginx.conf

server {
  # https://nginx.org/en/docs/http/ngx_http_referer_module.html
  valid_referers server_names *.example.com;

  if ($invalid_referer) {
    return 403;
  }
  
  ...
}