@jxself@identi.ca The RequireSSL directive-family is where it stops being a straightforward solution and explodes into a combinatorics nightmare where no one else's example works.