The origin certificate does not include an OCSP responder URL,
causing nginx warnings. Comment out stapling directives until
a proper certificate with OCSP support is deployed.
OCSP stapling improves TLS handshake performance and privacy by
having the server provide certificate revocation status directly,
so clients don't need to query the CA separately.
Replace the 404 response on port 80 with a 301 redirect to the
equivalent HTTPS URL, so users who type http:// are seamlessly
upgraded to a secure connection.
lingkai5wu