proxy_ssl_only

server {
	listen 149.202.86.117:80;
	listen [2001:41d0:1004:75::]:80;

	server_name <subdomain>.project-creative.de *.<subdomain>.project-creative.de;

	root /var/www/html;

	location /.well-known {
		# Just to prevent the redirect
	}

	location / {
		return 301 https://<subdomain>.project-creative.de$request_uri;
	}
}

server {
	listen 149.202.86.117:443 ssl http2;
	listen [2001:41d0:1004:75::]:443 ssl http2;

	server_name <subdomain>.project-creative.de *.<subdomain>.project-creative.de;

	ssl_certificate /etc/letsencrypt/live/<subdomain>.project-creative.de/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/<subdomain>.project-creative.de/privkey.pem;

	include global/ssl.conf;
	client_max_body_size 0;

        location / {
		proxy_pass http://127.0.0.1:xxx/;
	}
}