location /auth { if ($arg_pwd = 'my-secret-password-here') { return 200; } return 401; }