server {
    listen 80;
    server_name poly-dev.szhub.space;

    # Builder analytics (revenue/volume/trades) — admin only.
    # Create htpasswd: printf 'user:%s\n' "$(openssl passwd -apr1 PASS)" | sudo tee /etc/nginx/.htpasswd-poly
    location /api/analytics/ {
        auth_basic "Restricted";
        auth_basic_user_file /etc/nginx/.htpasswd-poly;
        proxy_pass http://127.0.0.1:3240;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    location / {
        proxy_pass http://127.0.0.1:3240;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}
# After placing in /etc/nginx/sites-available/poly-dev.szhub.space:
#   sudo ln -s /etc/nginx/sites-available/poly-dev.szhub.space /etc/nginx/sites-enabled/
#   sudo nginx -t && sudo systemctl reload nginx
#   sudo certbot --nginx -d poly-dev.szhub.space