diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf
index 96372f58c3..cc62277402 100644
--- a/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf
+++ b/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf
@@ -6,6 +6,11 @@ ProxyPreserveHost On
 ProxyPass {{ localpath }} {{ proxyurl }}{{remotepath}}
 ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}}
 
+# No more v1
+<Location /v1/>
+  Require all denied
+</Location>
+
 # We require auth on /v2/ exactly to make sure that docker realizes it needs to
 # send a username/password.
 <Location /v2/>