[opensuse] apache rewrite - howto allow http from local lan but require https from outside?