Turned out there was an INPUT DROP rule in iptables (but not in ip6tables), although I am using ufw as a firewall. Now https works and my nginx redirects are functioning as expected! Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289099,289186#msg-289186