I have an API that I want to be accessible only by https. I know I kan use URL-rewrite to make a redirect, but would like to not install additional modules. I was thinking is it secure solution (in a way that it will not allow http connections) to provide https only bindings?

[![enter image description here][1]][1]


  [1]: https://i.sstatic.net/2zQLK.png

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?