location / {
                   auth_basic  "Confidential data, password-protected";
                   auth_basic_user_file  /etc/nginx/.passwd.mB.Q9ER;
                   ......
                }
# echo "user:`openssl passwd -apr1 user123`" > /etc/nginx/.passwd.mB.Q9ER