Why 307 redirects from http -> https instead of 301?

307 is coming from your browser, we have HSTS here, so browser issue the 307 in dev tools, if you use curl it will be a 301.