a most wonderful stanza:
server_name ...;
rewrite ^ https://$server_name$request_uri? redirect;
not strictly applicable in this case ofc (it specifically is for https upgrade while keeping all other bits), but I just figured I'd put it here so other people can crib it
(the amount of god-awful regex matching I've seen for that before....)