upstream reverse_proxy_backend { server 192.168.88.50:8888; server 1.1.1.1 backup; } server { server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu; location / { proxy_pass http://reverse_proxy_backend; auth_basic "Restricted Content"; auth_basic_user_file /var/www/authentication/htpasswd; } location /.well-known/acme-challenge/ { root /var/www/certbot; } listen 80 ; }