Files
fedora-infra_ansible/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf
Patrick Uiterwijk b6dda2c8b3 Create candidate registry at proxy
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-29 19:09:38 +00:00

33 lines
776 B
Plaintext

RequestHeader set X-Forwarded-Scheme https early
RequestHeader set X-Scheme https early
RequestHeader set X-Forwarded-Proto https early
ProxyPreserveHost On
ProxyPass {{ localpath }} {{ proxyurl }}{{remotepath}}
ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}}
SSLVerifyClient optional
SSLVerifyDepth 1
SSLCACertificateFile /etc/pki/httpd/fedora-server-ca.cert
SSLOptions +FakeBasicAuth
<Location /v2>
Order deny,allow
Allow from all
AuthName "Registry Authentication"
AuthType Basic
AuthUserFile /etc/httpd/conf.d/candidate-registry.fedoraproject.org/passwd
# Anyone can read
<Limit GET HEAD>
Require all granted
</Limit>
# Write access to docker-deployer only
<Limit POST PUT DELETE>
Require valid-user
</Limit>
</Location>