ansible_playbook_servers/templates/files/nginx/sites/grafana.l3d.ch_tls.conf

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;

        server_name grafana.l3d.ch;

        include snippets/tls_parameters_{{ site.name }}.snippet.conf;
        include snippets/tls_certificate_{{ site.name }}.snippet.conf;
        include snippets/logging_{{ site.name }}.snippet.conf;

        location / {
             auth_basic "Monitoring oder so";
             auth_basic_user_file /etc/nginx/auth/grafana.l3d.space.htpasswd;
             proxy_pass http://localhost:3000;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
        }
}