@joseph htpassword isn't a very good authentication method. If I were to do it, I'd probably just limit access by IP using my WAF.
But I wanted something better designed for the job. Docuwiki offers 2fa a load of other bits via plugins.
Migration was copy/paste exercise, didn't take long though. Probably could have scripted it, but I don't have loads in there, so c/p was easier and quicker.