diff --git a/machines/web01/redirections.nix b/machines/web01/redirections.nix
index 1d418e5..f37d8d3 100644
--- a/machines/web01/redirections.nix
+++ b/machines/web01/redirections.nix
@@ -3,28 +3,35 @@
 let
   retired_host = "retired.dgnum.eu";
 
+  mkRetired = hosts:
+    builtins.listToAttrs (builtins.map (name: {
+      inherit name;
+      value.to = retired_host;
+    }) hosts);
+
+  mkSub = domain: builtins.map (s: "${s}.${domain}");
+
   redirections = {
     "nuage.beta.rz.ens.wtf".to = "cloud.dgnum.eu";
     "notion.rz.ens.wtf".to = "docs.dgnum.eu";
     "docs.beta.rz.ens.wtf".to = "pads.dgnum.eu";
-    "calendrier.eleves.ens.fr" = {
-      to = "calendrier.dgnum.eu";
-      ssl = true;
-    };
-  } // (builtins.listToAttrs (builtins.map (name: {
-    inherit name;
-    value = {
-      to = retired_host;
-      ssl = true;
-    };
-  }) retired));
+    "calendrier.eleves.ens.fr".to = "calendrier.dgnum.eu";
+    "git.rz.ens.wtf".to = "git.dgnum.eu";
+  } // (mkRetired retired);
 
-  retired = [
-    # "auth.rz.ens.wtf"
-    # "photos.ens.wtf"
-    "alevins.ens.fr"
-    "www.climatenavigator.ens.fr"
-  ];
+  retired = (mkSub "ens.fr" [ "alevins" "www.climatenavigator" ])
+    ++ (mkSub "rz.ens.wtf" [ "s3" "cdn" ]) ++ (mkSub "beta.rz.ens.wtf" [
+      "todo"
+      "minecraft"
+      "factorio"
+      "home"
+      "pads"
+      "api.pads"
+      "files.pads"
+      "sandbox.pads"
+      "jurisprudens"
+      "rstudio"
+    ]);
 
 in {
   services.nginx.virtualHosts = {
@@ -37,7 +44,7 @@ in {
       default = true;
     };
   } // (builtins.mapAttrs (host:
-    { to, ssl ? false }: {
+    { to, ssl ? true }: {
       globalRedirect = to;
       enableACME = ssl;
       forceSSL = ssl;