Apache mod_rewrite .htaccess rule for CakePHP to force HTTPS, but ensure Letsencrypt renew works automatically thru virtualmin

.htaccess

<IfModule mod_rewrite.c>
   RewriteEngine on

   RewriteRule ^.well-known/ - [L,NC]

   RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
   RewriteRule ^(.*)$ https://%1/$1 [R=301,L]

   RewriteCond %{HTTPS} !=on
   RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]

   RewriteRule    ^$ app/webroot/    [L]
   RewriteRule    (.*) app/webroot/$1 [L]
</IfModule>