http-auth-proxy.conf.template

server {
    listen       80;
    listen  [::]:80;
    root /usr/share/nginx/html;

    location / {
        auth_basic "Restricted Area";
        auth_basic_user_file /etc/nginx/http-auth.htpasswd;

        proxy_pass http://protected_backend;
    }
}

upstream protected_backend {
    server ${BACKEND_HOST_AND_PORT};
}