From 9f862484dfcc9b02246da0b36befed1ba343104a Mon Sep 17 00:00:00 2001
From: Jamil <jamilbk@users.noreply.github.com>
Date: Tue, 30 Aug 2022 14:28:37 -0700
Subject: [PATCH] Redirect http -> https when acme is enabled (#942)

---
 omnibus/cookbooks/firezone/templates/redirect.conf.erb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/omnibus/cookbooks/firezone/templates/redirect.conf.erb b/omnibus/cookbooks/firezone/templates/redirect.conf.erb
index b76cb3198..9a5862478 100644
--- a/omnibus/cookbooks/firezone/templates/redirect.conf.erb
+++ b/omnibus/cookbooks/firezone/templates/redirect.conf.erb
@@ -6,6 +6,8 @@ server {
   <% end -%>
   server_name <%= @server_name %>;
 
+  return 301 https://<%= @server_name %>$request_uri;
+
   # Needed for ACME requests
   location /.well-known/acme-challenge/ {
     alias <%= @acme_www_root %>/.well-known/acme-challenge/;