There are several forum threads and lighty wiki articles about this, but none really cover a concise example of how to do it. Many parts of the documentation are confusing and non-obvious, the situation is not helped by the fact that you cannot do name-based SSL hosting, so what you'd expect to be the logical configuration doesn't work.
After staring at these for a few hours:
- Documentation: Module: mod_redirect
- How to redirect www
- How to redirect http to https
- Simple SSL configuration
- Documentation: Secure HTTP