#!/bin/bash

htpasswd -bc  /etc/nginx/secretchamber jarkom modul3

cat > /etc/nginx/sites-enabled/default <<EOL
upstream backend {
    server 10.67.1.2; # IP HarryPotter
    server 10.67.1.3; # IP RonWeasley
    server 10.67.1.14; # IP HermioneGranger (setelah nomor 5)
}

server {
	listen 80;
	listen [::]:80;

    server_name _;

	error_log /var/log/nginx/error.log;
	access_log /var/log/nginx/access.log;

    auth_basic              "Secure Area";
    auth_basic_user_file    /etc/nginx/secretchamber;

	location / {
        proxy_pass http://backend;
        proxy_set_header    X-Real-IP       \$remote_addr;
        proxy_set_header    X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header    Host            \$http_host;
    }
}
EOL

nginx -s reload