[_mikz]

There is lua-resty-auto-ssl [1] providing exactly that. Sure, it is not plain Nginx, but OpenResty.

[1] https://github.com/GUI/lua-resty-auto-ssl