Nginx

The blog answered on both HTTP and HTTPS at once — tracking down the default_server catching every HTTP request and rewriting it into a clean 301 chain to a single canonical domain.

Tired of Tencent Cloud’s free certificate silently expiring and needing manual re-binding, I moved my Typecho blog over to acme.sh via a Gitee mirror instead.