Correct way in new versions of nginx

Turn out my first answer to this question was correct at certain time, but it turned into another pitfall - to stay up to date please check Taxing rewrite pitfalls

I have been corrected by many SE users, so the credit goes to them, but more importantly, here is the correct code:

server {
       listen         80;
       server_name    my.domain.com;
       return         301 https://$server_name$request_uri;
}

server {
       listen         443 ssl;
       server_name    my.domain.com;
       # add Strict-Transport-Security to prevent man in the middle attacks
       add_header Strict-Transport-Security "max-age=31536000" always; 

       [....]
}

I had a no_proxy environment variable for the hostnames of the minion nodes in the kube-apiserver.yaml configuration file, but for some reason the kube-apiserver connected to the IP addresses of the minion nodes and not to the hostnames. It did not do this before in version 1.12.1, as it only connected to the master node via its IP address. I have added the IP addresses of all the minion nodes in the config, restarted kubelet (and thus kube-apiserver) and the issue is now solved.

Protip: If you need to use a http/https proxy to pull images from the internet. make sure you add both the hostname and IP address of all master and minion nodes in your no_proxy environment variable.