Take a look at some background for on-demand-tls at this great documentation: Serving tens of thousands of domains over HTTPS with Caddy
You can then also combine other matchers like host, header_regexp or maps to achive what you want and redirect on demand.