nginx https 轉發

add_header Content-Security-Policy upgrade-insecure-requests;