diff --git a/ansible/roles/panko/templates/wsgi-panko.conf.j2 b/ansible/roles/panko/templates/wsgi-panko.conf.j2
index 8216b492af..b36a9249f3 100644
--- a/ansible/roles/panko/templates/wsgi-panko.conf.j2
+++ b/ansible/roles/panko/templates/wsgi-panko.conf.j2
@@ -1,10 +1,17 @@
 {% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
+{% set binary_path = '/usr/bin' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/bin' %}
 Listen {{ api_interface_address }}:{{ panko_api_port }}
 
 ServerSignature Off
 ServerTokens Prod
 TraceEnable off
 
+<Directory "{{ binary_path }}">
+    <FilesMatch "^panko-api$">
+        Require all granted
+    </FilesMatch>
+</Directory>
+
 <VirtualHost *:{{ panko_api_port }}>
 
   ErrorLog "/var/log/kolla/panko/panko-api-error.log"
@@ -13,10 +20,6 @@ TraceEnable off
   WSGIApplicationGroup %{GLOBAL}
   WSGIDaemonProcess panko group=panko processes={{ openstack_service_workers }} threads=1 user=panko python-path={{ python_path }}
   WSGIProcessGroup panko
-  WSGIScriptAlias / "{{ python_path }}/panko/api/app.wsgi"
-
-  <Directory "{{ python_path }}/panko/api">
-        Require all granted
-  </Directory>
+  WSGIScriptAlias / "{{ binary_path }}/panko-api"
 
 </VirtualHost>