No, not for a VPS. They are configured at the web server. If you mean CDN, you might be able to use a _headers file or similar to add. Cloudflare can definitely do it.

for static sites... it's not that I would call them useless, but most are just not very critical. Clickjacking and any cookie attacks on a site without cookies is pretty useless most of the time.