# Preserve the request method during HTTP->HTTPS upgrades. 301 is more common,
# but 307 avoids surprising POST-to-GET rewrites on login and webhook paths.
if ($scheme = http) {
	return 307 https://$http_host$request_uri;
}