server {
  listen ${PROTECTED_SERVICE_PORT};
  server_name localhost;

  location ${PROTECTED_SERVICE_HEALTHCHECK} {
    proxy_pass http://${PROTECTED_SERVICE_ENDPOINT};
  }

  location /logout {
    return 401;
  }

  location / {
    auth_basic "Protected by nginx-auth-proxy";
    auth_basic_user_file /etc/nginx/auth/${PROTECTED_SERVICE_NAME};

    proxy_pass http://${PROTECTED_SERVICE_ENDPOINT};
  }
}