From 89fc603a89b5b0d20891c9e246dca3f305f13958 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Fri, 23 Feb 2018 18:02:15 +0100
Subject: [PATCH] Allow GET/HEAD requesting by everything

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 .../templates/reversepassproxy.registry-fedora.conf      | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.registry-fedora.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.registry-fedora.conf
index abe388b26f..8c57413603 100644
--- a/roles/httpd/reverseproxy/templates/reversepassproxy.registry-fedora.conf
+++ b/roles/httpd/reverseproxy/templates/reversepassproxy.registry-fedora.conf
@@ -27,7 +27,12 @@ RewriteRule ^/signatures/(.*) /srv/web/registry-signatures/$1 [L]
 
 {% else %}
 
-  <Location /v2>
+<Location /v2>
+  <Limit GET HEAD>
+    require all granted
+  </Limit>
+  <LimitExcept GET HEAD>
     require valid-user
-  </Location>
+  </LimitExcept>
+</Location>
 {% endif %}