<!--
	Nonfunctional domains:

		tuxfamily.net subdomains:

			- download
			- git		(times out)
			- listengine	(cert: panel; shows panel's data)
			- lists		(times out)
			- projects	(cert: panel; shows panel's data)

-->
<ruleset name="TuxFamily.org" default_off="mismatch, self-signed, may need more exclusions">

	<!--	Cert: web.tuxfamily.net	-->
	<target host="anwiki.com" />
	<target host="*.anwiki.com" />
	<target host="glx-dock.org" />
	<target host="www.glx-dock.org" />
	<target host="web.tuxfamily.net" />
	<target host="*.tuxfamily.org" />
		<exclusion pattern="^http://(download|git|listengine|lists|projects)\.tuxfamily\.org/" />
	<target host="bugs.vhffs.org" />


	<securecookie host="^(.*\.)?anwiki\.com$" name=".*" />
	<securecookie host="^glx-dock\.org$" name=".*" />
	<securecookie host="^[\w\-]+\.tuxfamily\.org$" name=".*" />
	<securecookie host="^bugs\.vhffs\.org$" name=".*" />


	<!--	Cert: web.tuxfamily.net	-->
	<rule from="^https?://(?:(bugs\.|doc\.|forum\.)|www\.)?anwiki\.com/"
		to="https://$1anwki.com/" />

	<!--	Ditto.	-->
	<rule from="^https?://(?:www\.)?glx-dock\.org/"
		to="https://glx-dock.org/" />

	<!--	Secure 404!	-->
	<rule from="^http://web\.tuxfamily\.net/"
		to="https://web.tuxfamily.net/" />

	<!--	- Projects have unique subdomains
		- Those observed present a cert for web.tuxfamily.net

		- Observed & working non-project subdomains:

			- faq
			- logo
			- panel
				-->
	<rule from="^http://([\w\-]+)\.tuxfamily\.org/"
		to="https://$1.tuxfamily.org/" />

	<!--	Cert: web.tuxfamily.net	-->
	<rule from="^http://bugs\.vhffs\.org/"
		to="https://bugs.vhffs.org/" />

</ruleset>
