force https for phpMyAdmin access

etc/apache2/conf-available/phpMyAdmin.conf

@@ -4,11 +4,19 @@ AddExternalAuth pwauth /usr/sbin/pwauth
 SetExternalAuthMethod pwauth pipe
 
 <Location /phpMyAdmin>
+  # force https
+  <If "%{HTTPS} != 'on'">
+    RewriteEngine On
+    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
+  </If>
+  # require auth
+  <Else>
     AuthType Basic
     AuthName "phpMyAdmin"
     AuthBasicProvider external
     AuthExternal pwauth
     Require valid-user
+  </Else>
 </Location>
 
 # this is to force the default fpm, so we don't end up trying to use a virtualhosts jailed fpm which won't work