From cf97de7e6332c43c2bf358e210c3e1dcb9c01985 Mon Sep 17 00:00:00 2001
From: Stefan Hacker <duffy@debian-linux-terminal.local>
Date: Thu, 9 Apr 2026 15:42:11 +0200
Subject: [PATCH] Redirect HTTP to HTTPS on WebUI port

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 nginx/nginx.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 609f83c..e184e91 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -27,6 +27,9 @@ http {
         ssl_certificate_key /certs/server.key;
         ssl_protocols TLSv1.2 TLSv1.3;
 
+        # Redirect plain HTTP requests to HTTPS
+        error_page 497 https://$host:$server_port$request_uri;
+
         location / {
             proxy_pass http://127.0.0.1:5000;
             proxy_set_header Host $host;