server { listen 80; server_name ...; auth_basic "Root Zone"; auth_basic_user_file /www/passwd/.htpasswd; .... }