The ngx_http_auth_basic_module module allows to limit access to resources by validating the user name and password using the “HTTP Basic Authentication” protocol.

Access can also be limited by address. Simultaneous limitation of access by address and by password is controlled by the satisfy directive.

location / {
    auth_basic           "closed site";
    auth_basic_user_file conf/htpasswd;
}

auth_basic off;

Enables validation of user name and password using the “HTTP Basic Authentication” protocol. The specified parameter is used as a realm. The parameter off allows to cancel the effect of the auth_basic directive inherited from the previous configuration level.

Specifies a file that keeps user names and passwords, in the following format:

# comment
name1:password1
name2:password2:comment
name3:password3

Passwords should be encrypted with the crypt() function. The htpasswd command from the Apache web server distribution can be used to create such a file.