Proper way to enforce https only?

Thanks @pshoukry! It solved the problem for me (EC2, no proxy, just iptables routing).