Stunnel accepts only the ssl (HTTPS) request, if you want a http request to be redirected to https, a server listening on port 80 must redirect the url to the stunnel 443 port. You can run hfs listening only on address:port as 127.0.0.1:8443 with in stunnel a config like
[https]
accept = 0.0.0.0:443
connect = 127.0.0.1:8443
.....
you can use a second hfs stored in another folder ( not the same of the default server) to redirect request.
this hfs must have his options saved to disk and hear port 80, no file in vfs and root template can be defined in diff template as
[=not found]
<!DOCTYPE HTML>
<html lang="en-US">
<head>
<meta charset="UTF-8">
<meta http-equiv="refresh" content="5; url=https://sub.mydomain.de{.get|url.}">
<title>Page Redirection</title>
</head>
<body>
You will be redirected automatically to<p>
https://sub.mydomain.de{.get|url.} in 5 second
</body>
</html>
all request http on port 80 are redirected to stunnel on port 443