if ($Upgrade-Insecure-Requests = 1) { return 301 https://$host$request_uri; }
