server {
    listen {{ kibana_nginx_port }};

    server_name {{ kibana_server_name }};

{% if kibana_enable_basic_auth | bool %}
    auth_basic "Restricted Access";
    auth_basic_user_file /etc/nginx/htpasswd.users;
{% endif %}

    location / {
        proxy_pass http://127.0.0.1:{{ kibana_port }};
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
}