Apache2 vhost and site config setup. `mydomain-ssl.conf` is the SSL site conf, `mydomain.conf` is the regular site conf, and `mydomain.vhost` is the vhost found in `/etc/apache2/conf/vhosts`.

mydomain-ssl.conf

<IfModule mod_ssl.c>
    <VirtualHost *:443>
        Include conf/vhosts/mydomain.vhost

        SSLCertificateFile /etc/letsencrypt/live/mydomain.com/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/mydomain.com/privkey.pem
        Include /etc/letsencrypt/options-ssl-apache.conf
    </VirtualHost>
</IfModule>

mydomain.conf

<VirtualHost *:80>
    Include conf/vhosts/mydomain.vhost
</VirtualHost>

mydomain.vhost

ServerAdmin admin@mydomain.com

ServerName mydomain.com
UseCanonicalName on
ServerAlias www.mydomain.com

DocumentRoot /var/www/

<Directory />
    Options +FollowSymLinks
    AllowOverride All
</Directory>

<Directory /var/www >
    Options -Indexes
    Require all granted
</Directory>

RewriteEngine On
# force non-www
RewriteCond %{HTTP_HOST} ^www [NC]
RewriteRule (.*) https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]

# force https
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{SERVER_NAME}%{REQUEST_URI} [R,L]