diff --git a/haproxy_ssl.conf b/haproxy_ssl.conf
index 0b307c8..4729d1f 100644
--- a/haproxy_ssl.conf
+++ b/haproxy_ssl.conf
@@ -25,6 +25,7 @@ frontend http
         bind *:80
         reqadd X-Forwarded-Proto:\ http
         acl letsencrypt-acl path_beg /.well-known/acme-challenge/
+        redirect scheme https code 301 if !{ ssl_fc }
         use_backend letsencrypt-backend if letsencrypt-acl
         default_backend www-backend