separate nginx.conf and basic auth