diff --git a/.editorconfig b/.editorconfig
index 6dc2763..7e9581e 100644
--- a/.editorconfig
+++ b/.editorconfig
@@ -1,6 +1,6 @@
 # For more information about the properties used in
 # this file, please see the EditorConfig documentation:
-# http://editorconfig.org/
+# https://editorconfig.org/
 
 root = true
 
diff --git a/doc/how-nginx-works.md b/doc/how-nginx-works.md
index 3d3ee7b..183bb79 100644
--- a/doc/how-nginx-works.md
+++ b/doc/how-nginx-works.md
@@ -13,7 +13,7 @@ which may trip up new users.
 A [location block (directive)](https://nginx.org/en/docs/http/ngx_http_core_module.html#location)
 defines the behavior for a given request which matches the location url pattern. The block used
 is whichever is the most specific for the given request, the rules for
-precedence can be found in [Nginx's wiki](http://wiki.nginx.org/HttpCoreModule#location).
+precedence can be found in [Nginx's documentation](https://nginx.org/en/docs/http/ngx_http_core_module.html#location).
 
 It is very important when writing nginx configuration files to understand that
 only one location block will be used by Nginx. When in doubt a useful technique
diff --git a/h5bp/directive-only/extra-security.conf b/h5bp/directive-only/extra-security.conf
index 5d7fdfd..25a78f8 100644
--- a/h5bp/directive-only/extra-security.conf
+++ b/h5bp/directive-only/extra-security.conf
@@ -13,5 +13,5 @@ add_header X-XSS-Protection "1; mode=block" always;
 # with Content Security Policy (CSP) enabled (and a browser that supports it (https://caniuse.com/#feat=contentsecuritypolicy),
 # you can tell the browser that it can only download content from the domains you explicitly allow
 # CSP can be quite difficult to configure, and cause real issues if you get it wrong
-# There is website that helps you generate a policy here http://cspisawesome.com/
+# There is website that helps you generate a policy here https://www.cspisawesome.com/
 # add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' https://www.google-analytics.com;" always;
diff --git a/h5bp/location/cross-domain-fonts.conf b/h5bp/location/cross-domain-fonts.conf
index 3963339..bfc06ae 100644
--- a/h5bp/location/cross-domain-fonts.conf
+++ b/h5bp/location/cross-domain-fonts.conf
@@ -4,7 +4,7 @@ location ~* \.(?:ttf|ttc|otf|eot|woff|woff2)$ {
 
   # Also, set cache rules for webfonts.
   #
-  # See http://wiki.nginx.org/HttpCoreModule#location
+  # See https://nginx.org/en/docs/http/ngx_http_core_module.html#location
   # And https://github.com/h5bp/server-configs/issues/85
   # And https://github.com/h5bp/server-configs/issues/86
   access_log off;
diff --git a/sites-available/example.com b/sites-available/example.com
index c3d869c..01af103 100644
--- a/sites-available/example.com
+++ b/sites-available/example.com
@@ -1,7 +1,7 @@
 # www to non-www redirect -- duplicate content is BAD:
 # https://github.com/h5bp/html5-boilerplate/blob/5370479476dceae7cc3ea105946536d6bc0ee468/.htaccess#L362
 # Choose between www and non-www, listen on the *wrong* one and redirect to
-# the right one -- http://wiki.nginx.org/Pitfalls#Server_Name
+# the right one -- https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/#server-name-if
 server {
   # don't forget to tell on which port this server listens
   listen [::]:80;
diff --git a/sites-available/ssl.example.com b/sites-available/ssl.example.com
index 5777606..c51c5c4 100644
--- a/sites-available/ssl.example.com
+++ b/sites-available/ssl.example.com
@@ -1,5 +1,5 @@
 # Choose between www and non-www, listen on the *wrong* one and redirect to
-# the right one -- http://wiki.nginx.org/Pitfalls#Server_Name
+# the right one -- https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/#server-name-if
 #
 server {
   listen [::]:80;