How to remove an unencrypted page?

Question

HTML

There is a site. clinicapp.ru
If you go to it using this link, then an unsecured connection is opened.
And if this https://clinicapp.ru , then the protected one is loaded.

How to make it so that when you enter both options, a page with a secure connection is loaded?

Answer 1

Firstly, set up a redirect from HTTP to HTTPS, as advised above, and secondly, add the Strict-transport-security header so that browsers remember this after the first opening of the site and, upon subsequent openings of the site, automatically connect via HTTPS without pulling again HTTP.