add a nginx redirect configuration for --ssl=force