diff --git a/snippets/upgrade-secure.conf b/snippets/upgrade-secure.conf
new file mode 100644
index 0000000000000000000000000000000000000000..d926e632505de68a1ec25d714e01608bbe21f622
--- /dev/null
+++ b/snippets/upgrade-secure.conf
@@ -0,0 +1 @@
+if ($Upgrade-Insecure-Requests = 1) { return 301 https://$host$request_uri; }