Use nginx to redirect HTTP traffic to HTTPS

[sesh]

Can / should be achieved with return 301 https://$host$request_uri.

if ($http_x_forwarded_proto != 'https') {
  return 301 https://$host$request_uri;
}

(or just put a return inside the listen 80 block)