Force Full Site SSL with non-SSL redirecting

default

server {  
    listen   your-ip:80 default_server;
 
    server_name ex1.ex.net;
    server_name ex2.ex.net;
 
    return 301 https://$host$request_uri;
}
 
server {  
    listen 443 ssl;
 
    ssl on;
    ssl_certificate /certs/ssl.crt;
    ssl_certificate_key /certs/ssl.key;
 
    root /wwwroot;
 
    server_name ex1.ex.net;
 
    location / {
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Host $host; # !IMPORTANT: Hard to debug
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://localhost:1234/;
    }
 
}