diff --git a/roles/docker-distribution-proxy/templates/docker-registry-vhost.conf.j2 b/roles/docker-distribution-proxy/templates/docker-registry-vhost.conf.j2
index 90814fa006..fc100da539 100644
--- a/roles/docker-distribution-proxy/templates/docker-registry-vhost.conf.j2
+++ b/roles/docker-distribution-proxy/templates/docker-registry-vhost.conf.j2
@@ -41,7 +41,7 @@
 
 {% if auth.type == "ssl" %}
     SSLVerifyClient none
-    SSLCACertificateFile {{ auth.ssl.authca_dest }}
+    SSLCACertificateFile {{ auth.ssl.destdir }}/{{ auth.ssl.authca_dest }}
 {% endif %}
   <Location /v2>
     Order deny,allow
@@ -49,7 +49,7 @@
 {% if auth.type == "basic" %}
     AuthName "Registry Authentication"
     AuthType basic
-    AuthUserFile {{ auth.basic.userfile_dest }}
+    AuthUserFile {{ auth.basic.destdir }}/{{ auth.basic.userfile_dest }}
 {% endif %}
 {% if auth.type == "ssl" %}
     SSLVerifyClient require