Proper way to enforce https only?

force_ssl: [hsts: true, host: nil]

Solved it for me.