server { listen 80; location /.well-known { root /var/www/html; } location / { return 301 https://$host$request_uri; # enforce https } }