I have an API that I want to be accessible only by https. I know I kan use URL-rewrite to make a redirect, but would like to not install additional modules. I was thinking is it secure solution (in a way that it will not allow http connections) to provide https only bindings?

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?