SSL http redirection to https

Hello, I am trying to fix the problem with redirection.

I want to redirect from non-ssl http to https.

My main domain is with www >> www.myshopdomain.com
I use also la., for backoffice only so la.myshopdomain.com/backoffice

I read forum and I was trying to fix it but it does not help.
Can you help to to configure it?

---

Thank you in advance.

Code:

/usr/local/nginx/conf/conf.d
myshopdomain.com.ssl.conf

# Centmin Mod Getting Started Guide
# must read http://centminmod.com/getstarted.html
# For HTTP/2 SSL Setup
# read http://centminmod.com/nginx_configure_https_ssl_spdy.html

# redirect from www to non-www  forced SSL
# uncomment, save file and restart Nginx to enable
# if unsure use return 302 before using return 301
 server {
   server_name myshopdomain.com www.myshopdomain.com la.myshopdomain.com www.la.myshopdomain.com;
    return 302 https://myshopdomain.com$request_uri;
 }
 server {
   #server_name la.myshopdomain.com www.la.myshopdomain.com;
   # return 302 https://la.myshopdomain.com$request_uri;
 }

server {
  listen 443 ssl http2;
  server_name myshopdomain.com www.myshopdomain.com la.myshopdomain.com www.la.myshopdomain.com;

  ssl_dhparam /usr/local/nginx/conf/ssl/myshopdomain.com/dhparam.pem;
  ssl_certificate      /usr/local/nginx/conf/ssl/myshopdomain.com/myshopdomain.com-acme.cer;
  ssl_certificate_key  /usr/local/nginx/conf/ssl/myshopdomain.com/myshopdomain.com-acme.key;
  include /usr/local/nginx/conf/ssl_include.conf;

  http2_max_field_size 16k;
  http2_max_header_size 32k;
  # dual cert supported ssl ciphers



/usr/local/nginx/conf/conf.d
myshopdomain.com.conf file

# Centmin Mod Getting Started Guide
# must read http://centminmod.com/getstarted.html

# redirect from non-www to www
# uncomment, save file and restart Nginx to enable
# if unsure use return 302 before using return 301
#server {
#            listen   80;
#            server_name myshopdomain.com;
#            return 301 $scheme://www.myshopdomain.com$request_uri;
#       }

server {

  server_name myshopdomain.com www.myshopdomain.com la.myshopdomain.com www.la.myshopdomain.com;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

  #add_header X-Frame-Options SAMEORIGIN;
  add_header X-Xss-Protection "1; mode=block" always;
  add_header X-Content-Type-Options "nosniff" always;
  #add_header Referrer-Policy "strict-origin-when-cross-origin";

  # limit_conn limit_per_ip 16;
  # ssi  on;

 

Hello, are you sure that it is correct?

Two times
server_name myshopdomain.com;
??

Code:

[22:13][root@3419f ~]# curl -I http://myshopdomain.com
HTTP/1.1 301 Moved Permanently
Server: nginx/1.10.3
Date: Fri, 15 Mar 2019 22:14:03 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Location: http://www.myshopdomain.com/

[22:14][root@34178749f ~]# curl -I http://www.myshopdomain.com
HTTP/1.1 301 Moved Permanently
Date: Fri, 15 Mar 2019 22:14:08 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Cache-Control: no-cache
Location: https://www.myshopdomain.com/
Server: nginx centminmod
X-Powered-By: centminmod
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff

la.myshopdomain.com www.la.myshopdomain.com I want to use only as a alias as

my main domain is geoDNS, so to connect directly to Back office I if
la.myshopdomain.com www.la.myshopdomain.com

 

Is it correct?
change from

Code:

Code (Text):
 server {
   server_name myshopdomain.com www.myshopdomain.com la.myshopdomain.com www.la.myshopdomain.com;
   return 302 https://myshopdomain.com$request_uri;
 }
 server {
   #server_name la.myshopdomain.com www.la.myshopdomain.com;
   # return 302 https://la.myshopdomain.com$request_uri;
 }

server {
  listen 443 ssl http2;
  server_name myshopdomain.com www.myshopdomain.com la.myshopdomain.com www.la.myshopdomain.com;

change to

Code:

 server {
   server_name myshopdomain.com www.myshopdomain.com la.myshopdomain.com www.la.myshopdomain.com;
   return 302 https://www.myshopdomain.com$request_uri;
 }



server {
  listen 443 ssl http2;
  server_name myshopdomain.com www.myshopdomain.com la.myshopdomain.com www.la.myshopdomain.com;

why the response is 301 where there should be 302?

 

thank you for help

 

@eva2000, one additional question how you would manage SSLs and geoDNS IP?

E.g. I have one domain but 3 VPS in different location with different IP.

What ways are to renew the Letsencrypt SSLs?
Have you faced any problems with that?

I have noticed that Letsencrypt is redirect only to one VPS as it's IP is also redirected by geolocation (geoDNS).

At the moment I use Amazon AWS Route53 geo DNS.

 

@eva2000 There is some bug (or just it not works) with DNS validation as I add all entries to DNS but it not works.

It works for one IP, not for geoDNS option.

Is there is a chance that it will be coded?

 

i think it have correct entries, but it is like a bug.
I am not so experienced in SSL validation things but for one VPS it is ok for USA but for EU there is a problem.

some glue records problem or it is wrong or amazon bug.

i am not so experienced but it may be some bug also at AWS Route53.
I was looking for similar things but I did not found anything similar.