Otdfbt

My site is SSL-enabled and is called schandillia.com. And my objective is to force all access through https://www.schandillia.com...both for the homepage, as well as other pages. Following is what my Nginx conf looks like:

server 
 listen 80 default_server;
 listen [::]:80 default_server;
 # Redirect all HTTP requests to HTTPS with a 301 Moved Permanently response.
 return 301 https://$host$request_uri;


server 
 listen 443 default_server ssl http2; # spdy is a more performant alternative to http2
 listen [::]:443 ssl http2; # spdy is a more performant alternative to http2
 server_name .schandillia.com;

 location / 
 proxy_pass http://127.0.0.1:3000;
 charset UTF-8;
 proxy_http_version 1.1;
 proxy_set_header Upgrade $http_upgrade;
 proxy_set_header Connection 'upgrade';
 proxy_set_header Host $host;
 proxy_cache_bypass $http_upgrade;
 

This configuration allows the following:

http://schandillia.com -> https://www.schandillia.com
schandillia.com -> https://www.schandillia.com
www.schandillia.com -> https://www.schandillia.com

However, it does not enforce www on sub-routes, e.g., schandillia.com/about, etc. What needs changing in my configuration directives?

Update: Here's the entire .conf snippet for reference:

# read more here http://tautt.com/best-nginx-configuration-for-security/

# don't send the nginx version number in error pages and Server header
server_tokens off;

include /etc/nginx/sites-available/snippets/ssl-config.conf; # importing ssl configurations

# redirect all http traffic to https
server 
 listen 80 default_server;
 listen [::]:80 default_server;
 # Redirect all HTTP requests to HTTPS with a 301 Moved Permanently response.
 # return 301 https://$host$request_uri;
 return 301 https://www.schandillia.com$request_uri;


server jpe?g

# for subdomain dev
server 
 listen 443 ssl http2;
 listen [::]:443 ssl http2;
 server_name dev.schandillia.com;

 # Route for /
 location / 
 proxy_pass http://127.0.0.1:9001;
 include /etc/nginx/sites-available/snippets/proxy.conf; # importing proxy configurations
 

Hope this helps.

Currently you only redirect from http to https. You do not have a redirect from https to https.

You could separate the listen 443 ssl default_server and the server_name www.example.com into two separate blocks. You can use the same server block for your listen 80 default_server block.

For example:

server 
 listen 80 default_server;
 listen [::]:80 default_server;
 listen 443 default_server ssl;
 listen [::]:443 default_server ssl;

 return 301 https://www.schandillia.com$request_uri;


server 
 listen 443 ssl http2;
 listen [::]:443 ssl http2;
 server_name www.example.com;

 ...

Any request that is not to https://www.example.com and is not handled by another server block will be redirected to https://www.example.com.