server {
        listen 80;
        server_name @server_name@;
        return 301 https://$server_name$request_uri;  # enforce https
}