The "Your connection to this site is not secure" browser warning triggers when HTTPS pages load unencrypted http:// assets (mixed content) or when SSL certificates expire.

Nginx Content Security Policy Header

nginx.confnginx
# Enforce upgrade of insecure http requests via Content-Security-Policy
add_header Content-Security-Policy "upgrade-insecure-requests;";