diff --git a/nixos/modules/issuer.nix b/nixos/modules/issuer.nix
index 93de02efb6c6d444356651e04b985bb8d117fb5d..7636c8e784b55b59f8a460a80d51e358296d182b 100644
--- a/nixos/modules/issuer.nix
+++ b/nixos/modules/issuer.nix
@@ -243,7 +243,10 @@ in {
         serverAliases = builtins.tail cfg.domains;
         enableACME = cfg.tls;
         forceSSL = cfg.tls;
-        locations."/" = {
+        locations."/v1/" = {
+          # Only forward requests beginning with /v1/ so
+          # we pass less scanning spam on to our backend
+          # Want a regex instead? try locations."~ /v\d+/"
           proxyPass = "http://127.0.0.1:${internalHttpPort}";
         };
         locations."/metrics" = {