diff --git a/umatrix b/umatrix
index 26d4ba2..03b1127 100644
--- a/umatrix
+++ b/umatrix
@@ -1,14 +1,41 @@
 ! uMatrix: Ruleset recipes 1.0
 ! Title: Meine Regeln für websites
 
-Globale Blockaden
-    * googleoptimize.com
-        _ * block
+# These sites are globally blocked
+* googleoptimize.com * block
 
-Ausweisapp2
-    * 127.0.0.1
-        * 127.0.0.1 * allow
-        https-strict: 127.0.0.1 false
-    * localhost
-        * localhost * allow
-        https-strict: localhost false
+# German Ausweis app requires this:
+* 127.0.0.1 * allow
+https-strict: 127.0.0.1 false
+* localhost * allow
+https-strict: localhost false
+
+# CDNs
+* ajax.googleapis.com script allow
+* bootstrapcdn.com script allow
+* datatables.net script allow
+* jsdelivr.net script allow
+* hcaptcha.com script allow
+* polyfill.io script allow
+* search-api.swiftype.com * allow
+* swiftypecdn.com * allow
+
+# special sites that are included in other sites
+* api.hcaptcha.com xhr allow
+* api2.hcaptcha.com xhr allow
+* newassets.hcaptcha.com frame allow
+* newassets.hcaptcha.com xhr allow
+
+# Individual allows
+ansible.com redhat.com * allow
+kobo.com kbstatic1-a.akamaihd.net script allow
+ardmediathek.de ard.de * allow
+ardmediathek.de daserste.de * allow
+ardmediathek.de hrhlsde.akamaized.net media allow
+ardmediathek.de media.tagesschau.de media allow
+github.com githubassets.com * allow
+gog.com gog-statics.com * allow
+grafana.com discourse-cdn.com * allow
+
+# these are read the docs alias domains
+palletsprojects.com readthedocs.org * allow