oh thinking about it maybe not needed to use nginx level 302 http to https redirect if you just switch from flexible to full ssl at Cloudflare, then it will just connect to your https self-signed ssl cert version of site. But that means whatever...