k i just updated my webserver which happens to be redirecting webfinger (after Actual Proper Testing in a separated environment, for once), so, as the tech cat here, lmk if federation herefrom or -to is broken somehow
anyway i finally did the obvious feature where if i have headers for a particular domain and override headers for a particular resource, non-overriden headers from the domain are still used