Add HTTP to HTTPS redirect for shelley.exe.xyz domains

[josharian]

Author: philz42
Channel: #feedback
Link: https://discord.com/channels/1405685085923049482/1405686161791516873/1469544660367311111

---

Summary

Implement HTTP to HTTPS redirects for *.shelley.exe.xyz domains. Currently, HTTP connections are refused rather than redirected.

Context

With the migration from vm.exe.xyz:9999 to vm.shelley.exe.xyz (without explicit port), implementing redirects has become more straightforward.

Discussion

Previous investigation into customizing Go's HTTPS server proved challenging. Alternative approaches suggested:

• Separate nginx/caddy instance on port 80 that returns a 301 redirect (no proxying needed)

Notes

• This is separate from the main reverse proxy
• Should handle simple 301 redirects rather than proxying connections

[josharian]

We should get ourselves on the HSTS lists. Maybe the browsers would then take care of this for us.