You can use forcewww.com to make your apex domain redirect to www. The http → https on www works already.
A more complicated way, that I don’t currently know how to accomplish is Set up Let’s Encrypt with multiple domains (the old directions seem not to work now), so I recommend useing forcewww.com.
I intend to figure out how to solve the problem with the multiple-domaim solution, but too much other paying work is in the way.