CODEWITHSUNDEEP
nginx.htpasswd
eComEvo
eComEvo

Reputation: 12551

Password lock site except for certain routes running nginx

We have a server we don't want Google to index or anyone else to get access to unless they have a password.

How can I directory lock the entire server except for very specific routes used by external scanning services?

For instance, example.com/test should output a response from the framework without blocking but any other URL should ask for a password to get any content response.

I know how to do this with Apache using .htpasswd, but I need to be able to do it on nginx while whitelisting a specific route.

Upvotes: 0

Views: 733

Answers (2)

Kedarnag Mukanahallipatna
Kedarnag Mukanahallipatna

Reputation: 2347

This will enable /test/ to respond without needing any authentication and every other request will need authentication.

server {

  auth_basic      "Administrator Login";
  auth_basic_user_file  /var/www/static/.htpasswd;

  location /test/ {
    auth_basic off;
  }

}

Upvotes: 3

miknik
miknik

Reputation: 5941

Like this:

server {
    ...
    auth_basic "Enter password";
    auth_basic_user_file path/to/htpasswd;

    location /test/ {
        auth_basic off;
    }
}

Upvotes: 1

Related Questions