Force https on EC2 behind ALB except Healthchecks

default

server {
  # If traffic is http
  if ($http_x_forwarded_proto != 'https') {
      set $force_https "A";
  }

  if ($http_user_agent ~ 'ELB-HealthChecker/2.0') {
     set $force_https "${force_https}B";
  }

  if ($force_https = 'A') {
     return 301 https://$host$request_uri;
  }
}