blog: redirect HTTP traffic to HTTPS

Set secure to always on all handlers so that HTTP traffic
is redirected to an HTTPS URL with the same path.

References:

•	https://cloud.google.com/appengine/docs/standard/go/application-security#https_requestshttps://cloud.google.com/appengine/docs/standard/go/config/appref#handlers_secure

For golang/go#42281.

Change-Id: I2b86928d51d4e692d29ded1b244f3866c9b087e9
Reviewed-on: https://go-review.googlesource.com/c/blog/+/266737
Trust: Dmitri Shuralyov <dmitshur@golang.org>
Reviewed-by: Alexander Rakoczy <alex@golang.org>
Reviewed-by: Carlos Amedee <carlos@golang.org>
diff --git a/app.yaml b/app.yaml
index 9e17b15..45a26b9 100644
--- a/app.yaml
+++ b/app.yaml
@@ -15,9 +15,10 @@
 
 default_expiration: "7d"
 
+handlers:
+
 # Keep these static file handlers in sync with blog.go.
 # They're here for improved latency across global regions.
-handlers:
 - url: /favicon.ico
   static_files: static/favicon.ico
   upload: static/favicon.ico
@@ -31,3 +32,9 @@
   http_headers:
     Content-Type: application/font-woff
   secure: always
+
+# This is here to redirect all HTTP traffic to an HTTPS URL
+# with the same path.
+- url: /.*
+  script: auto
+  secure: always