From 39dc41533ecc8485f08de19a0196993783a39855 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Tue, 12 Jun 2018 22:59:41 +0200
Subject: [PATCH] Deny api v1 because docker tries to fall back

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 .../templates/reversepassproxy.candidate-registry.conf       | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf
index 96372f58c3..cc62277402 100644
--- a/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf
+++ b/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf
@@ -6,6 +6,11 @@ ProxyPreserveHost On
 ProxyPass {{ localpath }} {{ proxyurl }}{{remotepath}}
 ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}}
 
+# No more v1
+<Location /v1/>
+  Require all denied
+</Location>
+
 # We require auth on /v2/ exactly to make sure that docker realizes it needs to
 # send a username/password.
 <Location /v2/>