Let front-end reverse proxy (nginx) handle http --> https 302 redirect instead.