Forced HTTPS not working on Home Page
&lt;IfModule mod_rewrite.c&gt;
        RewriteEngine On
        RewriteCond %{HTTPS} off
        RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
    &lt;/IfModule&gt;
    &lt;IfModule mod_headers.c&gt;
        Header always set Strict-Transport-Security "max-age=31536000; $includeSubDomains"
    &lt;/IfModule&gt;


Is what you are looking for. Make sure to place these rules before any other rewriting rules (that may e.g. come from your webserver config).