Talkyard setting X-Frame-Options to deny always?

Hi all,

I'm at my wits end on this one. I'm running talkyard on a digital ocean server using a reverse proxy behind nginx. Everything about accessing talkyard itself works correctly (i.e. I can go to comments.mywifesblog.com fine and interact with talkyard as expected), but when she tries to add it to her blog, the embedded comments box gets blocked because the response from talkyard.mywifesblog.com sets X-Frame-Options to DENY.

I've tried everything I can think to:

• Having nginx rewrite the headers
• Trying to muck with talkyard's nginx config to rewrite/add the header as I want it
• Setting the "allow embedding from" value to every variant of her blog's URL, as well as wildcard values like "http://*"

No dice on any of them - I get DENY back every time.

Any idea what I might need to change here?