diff --git a/roles/fedora-web/ostree/files/ostree.conf b/roles/fedora-web/ostree/files/ostree.conf
index 3cfd248ff6..2c9a1091ae 100644
--- a/roles/fedora-web/ostree/files/ostree.conf
+++ b/roles/fedora-web/ostree/files/ostree.conf
@@ -1,4 +1,11 @@
 DocumentRoot /srv/web/ostree
 
 RewriteEngine On
+
 RewriteRule "^/objects/([a-f0-9]{2})/([a-f0-9]{62})\.commitmeta$" https://d1gglb5celp6et.cloudfront.net/objects/$1/$2.commitmeta
+
+RewriteCond %{HTTP:X-Amz-Cf-Id} ^$
+RewriteRule ^/summary - [F]
+
+RewriteCond %{HTTP:X-Amz-Cf-Id} ^$
+RewriteRule ^/refs - [F]