server { listen 8080; server_name _; add_header Content-Security-Policy "default-src 'self';"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; return 301 https://asimonson.com$request_uri; location / { proxy_pass http://localhost:5000/; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } }