Don't send Authorization to /v2/ to trigger WWW-Authenticate

nginx.conf

@@ -108,6 +108,7 @@ http {
 
     map $dockerAuth $finalAuth {
         "" "$http_authorization";    # if empty, keep the original passed-in from the docker client.
+        "/v2/" ""; # Don't send Authorization to /v2/ to trigger WWW-Authenticate
         default "Basic $dockerAuth"; # if not empty, add the Basic preamble to the auth
     }
 
@@ -259,8 +260,6 @@ echo "Docker configured with HTTPS_PROXY=$scheme://$http_host/"
         proxy_hide_header      Set-Cookie;
         proxy_ignore_headers   X-Accel-Expires Expires Cache-Control Set-Cookie;
 
-        proxy_pass_header Www-Authenticate;
-
         # Add the authentication info, if the map matched the target domain.
         include "/etc/nginx/conf.d/allowed_override_auth.conf";
         proxy_set_header Authorization $finalAuth;