diff --git a/src/.htaccess b/src/.htaccess
index 08a5a01..b1c33ee 100644
--- a/src/.htaccess
+++ b/src/.htaccess
@@ -1,3 +1,12 @@
+<IfModule mod_rewrite.c>
+    RewriteEngine On
+    # Redirect HTTP to HTTPS, including behind reverse proxies
+    RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
+    RewriteCond %{HTTPS} off
+    RewriteCond %{HTTP:X-Forwarded-Proto} !https
+    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
+</IfModule>
+
 <IfModule mod_headers.c>
     # Force HTTPS for one year
     Header always set Strict-Transport-Security "max-age=31536000"