Personally I would use a registrar redirect for either @ or www and forget about the https edge case.
Just pick whichever you have used in the past or publicised and stick with it.
You can go to the trouble of editing the yml, issuing a SAN cert and configuring redirects but it’s rarely truly necessary.