tls (and http) is Traefik dynamic config. Place it in a separate file and load it in static config via providers.file (doc).

Your http-to-https redirect can be placed globally on entrypoint, ceck simple Traefik example.

Note that you should update your Traefik image version.