nginx: permanently redirect to https