Force http to https

 1root@example.com:/var/www/sites/yoursite.example.com/www# git diff .htaccess
 2diff --git a/www/.htaccess b/www/.htaccess
 3index 440cabc..968f601 100644
 4--- a/www/.htaccess
 5+++ b/www/.htaccess
 6@@ -93,6 +93,12 @@ DirectoryIndex index.php index.html index.htm
 7   # RewriteCond %{HTTP_HOST} !^www\. [NC]
 8   # RewriteRule ^ http%{ENV:protossl}://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
 9   #
10+
11+  # Redirect HTTP to HTTPS
12+  RewriteCond %{HTTPS} off
13+  RewriteCond %{HTTP:X-Forwarded-Proto} !https
14+  RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
15+
16   # To redirect all users to access the site WITHOUT the 'www.' prefix,
17   # (http://www.example.com/... will be redirected to http://example.com/...)
18   # uncomment the following:
...

References: