Password-protect the admin interface and make an empty password file

1 files changed, 6 insertions, 0 deletions

diff --git a/conf/nginx.conf.example b/conf/nginx.conf.example
index c356da887..7b26afdbf 100644
--- a/conf/nginx.conf.example
+++ b/conf/nginx.conf.example
@@ -49,6 +49,12 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
     }
 
+    location /admin {
+        auth_basic "FixMyStreet admin interface";
+        auth_basic_user_file /var/www/fixmystreet/admin-htpasswd;
+        try_files $uri @catalyst;
+    }
+
     location / {
         if (-f $document_root/down.html) {
             return 503;