let us try going back to redirectmatch and ?

playbooks/include/proxies-redirects.yml

@@ -561,13 +561,13 @@
     website: pki.fedoraproject.org
     target: http://dogtagpki.org/
 
-  #   # all of this goes to one place the graveyard.
+    # all of this goes to one place the graveyard.
-  # - role: httpd/redirectmatch
+  - role: httpd/redirectmatch
-  #   shortname: keys
+    shortname: keys
-  #   website: keys.fedoraproject.org
+    website: keys.fedoraproject.org
-  #   regex: /(.*)$
+    regex: /(.*)$
-  #   target: https://fedoraproject.org/wiki/Infrastructure/graveyard
+    target: https://fedoraproject.org/wiki/Infrastructure/graveyard?
-  #   tags: keys
+    tags: keys
 
   - role: httpd/redirectmatch
     shortname: boot

playbooks/include/proxies-rewrites.yml

@@ -14,14 +14,6 @@
   roles:
 
 
-  - role: httpd/domainrewrite
-    destname: keys-rewrite
-    website: keys.fedoraproject.org
-    path: ^/.*$
-    status: 301
-    target: https://fedoraproject.org/wiki/Infrastructure/graveyard
-    tags: keys
-
   - role: httpd/domainrewrite
     destname: admin
     website: admin.fedoraproject.org