[NGINX] Redirect all hostnames and requests from http to https serverwide

https_only

# To have port 80 requests go to their 443 equivalents for an entire webserver, put this file in /etc/nginx/conf.d/
# Note that to specify the catch-all name or default server you
# need to use the *listen* directive, not the server_name directive!
# See also https://nginx.org/en/docs/http/request_processing.html
#
# - $host catches subdomain names.
# - 307 and 308 include both POST and GET request URIs.
# - 307 is Temporary, change to the Permanent 308 after thorough testing: # return 308 https://$host$request_uri;

server {
  listen 80 default;
  listen [::]:80 default;
    return 307 https://$host$request_uri;
}

For secure nginx TLS config (giving an A+ rating on Qualys' SSLlabs) -> https://gist.github.com/jult/395ad9fd3e9773a54a67aaf689beab27 (on my systems this is /etc/nginx/TLS )

Securely dropping the silly www. for better SEO:

server {
    listen  443 ssl http2;
    listen  [::]:443 ssl http2;
     server_name www.domain.tld;
      include /etc/nginx/TLS;
       return 308 https://domain.tld$request_uri;
}

server {
    listen  443 ssl http2;
    listen  [::]:443 ssl http2;
     server_name domain.tld;
      include /etc/nginx/TLS;
       root /srv/domain.tld;

[..your server stuff..]

}