Subdomain protection: htpasswd + ssl + digest authentication?

Question

Domain name market

And so, the bottom line is this:
On vps hosting there is a subdomain on which the script used for employees runs. It must be made so that it is extremely inconspicuous and protected. To enter, the script asks for authorization, but this is not secure enough.
What if we make self-signed (or not) SSL on it in conjunction with directory passwording via htaccess + digest authentication (MD5 transfer)? Or is it over the top? How is it correct?