See: https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/