Set up Let’s Encrypt with multiple domains / redirects

Forgive my ignorance, but is this editable via a site setting anywhere, or does something need to be edited in app.yml?

If the former, I had no luck finding it after updating to the latest, and if the latter, what specifically should be tweaked in app.yml ?