I have lets encrypt installed, but my site is also still accessible through http.

What is best? Redirect all traffic to https? And how? What's the (SEO-)safest way to do this?

I can't seem to get those questions cleared up?