map "$http_upgrade_insecure_requests:$scheme" $do_upgrade { "1:http" 1; default 0; }