Fixing NGINX configuration for http+non-www to https+www redirect

I'm struggling to get my nginx configuration right on my Ubuntu 20.04.1 LTS.

My goal: Have a good and secure nginx configuration that only has the minimum required lines to have all http and non-www traffic 301 redirected to https+www version.

I do have a working configuration; but it's not elegant. Would appreciate your help have a good configuration that I can be proud of.

server {

        root /var/www/mydomain/public;

        add_header X-Frame-Options "SAMEORIGIN";
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Content-Type-Options "nosniff";

        # Add index.php to the list if you are using PHP
        index index.php index.html index.htm index.nginx-debian.html;

        charset utf-8;

        server_name www.mydomain.com;

        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ /index.php?$query_string;
        }

        location ~ \.php$ {
                fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
                fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
                include fastcgi_params;
        }

        location ~ /\.(?!well-known).* {
                deny all;
        }

        listen [::]:443 ssl ipv6only=on; # managed by Certbot
        listen 443 ssl; # managed by Certbot
        ssl_certificate /etc/letsencrypt/live/mydomain.com/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/mydomain.com/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    }
    
    
    server {
        if ($host = mydomain.com) {
            return 301 https://$host$request_uri;
        } # managed by Certbot


            listen 80;

            server_name mydomain.com;
        return 404; # managed by Certbot


    }server {
        if ($host = www.mydomain.com) {
            return 301 https://$host$request_uri;
        } # managed by Certbot


            listen 80 default_server;
            listen [::]:80 default_server;

            server_name www.mydomain.com;
        return 404; # managed by Certbot


    }