It’s automatically enabled in discourse.conf if a valid certificate is present.
That is indeed since a year or two ago.
grep -q 'force_https' "/var/www/discourse/config/discourse.conf" || echo "force_https = 'true'" >> "/var/www/discourse/config/discourse.conf"