location ~* \.(mp4|m3u8|key)$ {
               valid_referers none blocked server_names http://your-domain.com/*;
              if ( $invalid_referer = "" ) {
                       return 403;
               }
        }