Redirect to HTTPS at the edge

ansible/roles/gateway/files/nginx.conf

@@ -23,6 +23,11 @@ http {
 
     #gzip  on;
 
+    server {
+        listen 80;
+        server_name _;
+        return 308 https://$host$request_uri;
+    }
 }
 
 stream {
@@ -38,11 +43,6 @@ stream {
     access_log /var/log/nginx/access.log access;
     access_log /var/log/nginx/ips.log ips;
 
-    server {
-        listen 80;
-        proxy_pass {{ wireguard.clients.ingress.ip }}:880;
-        proxy_protocol on;
-    }
     server {
         listen 443;
         proxy_pass {{ wireguard.clients.ingress.ip }}:8443;

ansible/roles/ingress/files/haproxy.cfg

@@ -31,11 +31,6 @@ listen matrix_internal
     server default {{ pve_hosts.pve_docker.ip }}:443 send-proxy-v2
 
 # External routes
-listen http_external
-    bind *:880 accept-proxy
-    mode http
-    server default {{ pve_hosts.pve_docker.ip }}:80 send-proxy-v2
-
 listen https_external
     bind *:8443 accept-proxy
     mode tcp