I have this in my server config
location / {
try_files $uri $uri/ =404;
auth_basic "protected site";
auth_basic_user_file /etc/nginx/.htpasswd;
}
When I call my domain or any subfolder, e.g. http://example.com/folder/ protection works fine
but when I call my domain incl. file-name, e.g. http://example.com/index.php I don’t need to enter any credentials and can just bypass authbasic.
What did I do wrong here?
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Solved it.
auth_basic "protected site";
auth_basic_user_file /etc/nginx/.htpasswd;
has to be moved outside of location block and then it works for the whole site
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.