.htaccess redirect http2https and nonwww2www (meeting HSTS requirements)

.htaccess

#
# As required by HSTS, two redirects:
#   1) http2https (MUST be first)
#   2) nonwww2www
#
# https://webmasters.stackexchange.com/questions/84757/htaccess-redirect-non-www-to-www-with-ssl-https
#
RewriteCond %{HTTPS} off
RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

#
# Enable HSTS (HTTP Strict Transport Security).
# "always" is needed so that the Header is also added on redirects (i.e., the first http2https without nonwww2www).
#
# https://hstspreload.org/
#
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" env=HTTPS

#
# ...and so on...
#

Test with a Web Browser Capture

There are two redirects:

• First: http to https
• Second: non-www to www

Check HSTS preload eligibility

Now the domain can be preloaded!