Обмен по https

# Ansible managed
# Additional website http
map $uri $need_redirect {
   "~^/bitrix/admin/1c_exchange*" 0;
   "~^/upload/1c_catalog/" 0;
   default 1;
}
server {
   listen 80 ;
        server_name site.ru www.site.ru;
   access_log /var/log/nginx/site_access.log main;
   error_log  /var/log/nginx/site_error.log warn;

   #charset utf-8;
   server_name_in_redirect off;

   proxy_set_header   X-Real-IP $remote_addr;
   proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header   Host $host:80;

    set $proxyserver  "http://127.0.0.1:8887";
  
    set $imcontenttype   "text/html; charset=utf-8";
    set $docroot      "/home/bitrix/ext_www/site.ru";

   index index.php;
   root "/home/bitrix/ext_www/site.ru";
   proxy_ignore_client_abort off;

   # Redirect to ssl if need
    #if (-f /home/bitrix/ext_www/site.ru/.htsecure) { rewrite ^/(.*)$ https://$host/$1 permanent; }
    if (-f /home/bitrix/ext_www/site.ru/.htsecure) { 
      set $conditions  "S";
   }
   if ($need_redirect) { 
      set $conditions  "${conditions}S";
   }
   if ($conditions = "SS")   {
      rewrite ^/(.*)$ https://$host/$1 permanent;
   }
      
   # Include parameters common to all websites
   include bx/conf/letsencrypt-challenge-tokens.conf;
   include bx/conf/bitrix.conf;

   # Include munin and nagios web
   include bx/server_monitor.conf;
}