location / {

    satisfy any;
    # Liste des IPs autorisées
    allow 192.168.1.0/24;
    # deny all;  # Toutes les autres IPs sont refusées sans l’authentification

    # Authentification basique
    auth_basic "Restricted Content";
    auth_basic_user_file /data/nginx/.htpasswd;

    proxy_pass http://192.168.1.150:19999/;  

    proxy_set_header X-Forwarded-Host $host;
    proxy_set_header X-Forwarded-Server $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
    proxy_pass_request_headers on;
    proxy_set_header Connection "keep-alive";
    proxy_store off;

    gzip on;
    gzip_proxied any;
    gzip_types *;
}