# Redirect HTTP to HTTPS
server {
    listen 80 default_server;
    listen [::]:80 default_server;

    return 308 https://$host$request_uri;
}

# Default HTTPS server
server {
    listen 443 ssl http2 default_server;
    listen [::]:443 ssl http2 default_server;

    return 404;
}