diff --git a/snippets/upgrade-secure.conf b/snippets/upgrade-secure.conf
new file mode 100644
index 0000000000000000000000000000000000000000..2abc805d48d6d33d67fa70967ac85fc7075dc65c
--- /dev/null
+++ b/snippets/upgrade-secure.conf
@@ -0,0 +1 @@
+if ($http_Upgrade-Insecure-Requests = 1) { return 301 https://$host$request_uri; }