Setting up HTTPS alongside existing config

Currently, I have traefik set up with the minimal config, including a custom defaultRule, that works very well inside my network.

Today, I discovered that my ISP no longer blocks inbound ports, so I want to set up HTTPS just for one container, with HTTP -> HTTP redirect.

How do I do this while maintaining my existing domain names?

E.g. the container is available at whoami.home.net. I want it to be also available on my-container.com.

Currently, the container has no traefik labels.

I looked through the docs and labels such as this overwrites existing config?

traefik.http.routers.whoami.rule: (`my-container.com`)
traefik.http.routers.whoami.entrypoints: websecure
traefik.http.routers.whoami.tls.certresolver: myresolver

How do I go about this?

Arrived at this:

http:
  routers:
    mycontainer:
      rule: Host(`mycontainer.com`)
      service: whoami@docker
      entrypoints:
        - http
        - websecure
      middlewares:
        - to-https
      tls:
        certResolver: lets-encrypt
        domains:
          - mycontainer.com

  middlewares:
    to-https:
      redirectScheme:
        scheme: https
        permanent: true