ServerName localhost
<IfModule ssl_module>
    SSLRandomSeed startup builtin
    SSLRandomSeed connect builtin
</IfModule>
<VirtualHost *:8080>
    ServerName registry.vlabs.uniwa.gr

        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine On
  SSLCertificateFile /usr/local/apache2/conf/domain.crt
  SSLCertificateKeyFile /usr/local/apache2/conf/domain.key

    SSLCompression off
    SSLProtocol all -SSLv2 -SSLv3 -TLSv1
    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    SSLHonorCipherOrder on

    Header always set "Docker-Distribution-Api-Version" "registry/2.0"
    Header onsuccess set "Docker-Distribution-Api-Version" "registry/2.0"
    RequestHeader set X-Forwarded-Proto "https"

    ProxyRequests     Off
    ProxyPreserveHost On
    ProxyPass /error/ !
    ProxyPass        /v2 http://registry.vlabs.uniwa.gr:5000/v2
    ProxyPassReverse /v2 http://registry.vlabs.uniwa.gr:5000/v2

  <Location /v2>
        #SSLRequireSSL

       # Order allow,deny
       # Allow from all
    # Read access to authentified users
    <Limit GET HEAD>
        Order allow,deny
        Allow from all
      #Require valid-user
    </Limit>

    # Write access to docker-deployer only
    <Limit POST PUT DELETE PATCH>
            Order deny,allow
            Deny from all
      #Require group pusher
    </Limit>

  </Location>


</VirtualHost>






<VirtualHost *:443>
    ServerName registry.vlabs.uniwa.gr

        ErrorLog ${APACHE_LOG_DIR}/error5043.log
        CustomLog ${APACHE_LOG_DIR}/access5043.log combined
    SSLEngine On
  SSLCertificateFile /usr/local/apache2/conf/domain.crt
  SSLCertificateKeyFile /usr/local/apache2/conf/domain.key

    SSLCompression off
    SSLProtocol all -SSLv2 -SSLv3 -TLSv1
    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    SSLHonorCipherOrder on

    Header always set "Docker-Distribution-Api-Version" "registry/2.0"
    Header onsuccess set "Docker-Distribution-Api-Version" "registry/2.0"
    RequestHeader set X-Forwarded-Proto "https"

    ProxyRequests     Off
    ProxyPreserveHost On
    ProxyPass /error/ !
    ProxyPass        /v2 http://registry.vlabs.uniwa.gr:5000/v2
    ProxyPassReverse /v2 http://registry.vlabs.uniwa.gr:5000/v2

  <Location /v2>
        #SSLRequireSSL

    Order deny,allow
    Allow from all
    AuthName "Registry Authentication"
    AuthType basic
    AuthUserFile "/usr/local/apache2/conf/httpd.htpasswd"
    AuthGroupFile "/usr/local/apache2/conf/httpd.groups"

    # Read access to authentified users
    <Limit GET HEAD>
      Require valid-user
    </Limit>

    # Write access to docker-deployer only
    <Limit POST PUT DELETE PATCH>
      Require group pusher
    </Limit>

  </Location>


</VirtualHost>