nginx.conf

error_log /var/log/nginx/error.log debug;

events { }

http {
    proxy_cache_path cache/  keys_zone=auth_cache:10m;

    # Change the IP address if the daemon is not running on the
    # same host as NGINX/NGINX Plus.
    # the real service , such as elasticsearch
    upstream backend {
        server 127.0.0.1:9200;
    }

    # NGINX/NGINX Plus listen on port 80 for requests that require
    # authentication. Change the port number as appropriate.
    server {
        listen 80;

        # Protected application
        location / {
            auth_request /auth-proxy;

            proxy_pass http://backend/;
        }

        location = /auth-proxy {
            internal;

            # The ldap-auth daemon listens on port 8080, as set
            # in nginx-ldap-daemon.go
            # Change the IP address if the daemon is not running on
            # the same host as NGINX/NGINX Plus.
            proxy_pass http://127.0.0.1:8080;

            proxy_pass_request_body off;
            proxy_set_header Content-Length "";
            proxy_cache auth_cache;
            proxy_cache_valid 200 403 10m;

            # The following directive adds the cookie to the cache key
            proxy_cache_key "$http_authorization$cookie_nginxauth";
        }
    }
}