OwnTracks

$ curl http://repo.owntracks.org/repo.owntracks.org.gpg.key | sudo apt-key add -
$ echo "deb  http://repo.owntracks.org/debian stretch main" | sudo tee /etc/apt/sources.list.d/owntracks.list > /dev/null
$ sudo apt-get update
$ sudo apt-get install build-essential linux-headers-$(uname -r) libcurl4-openssl-dev libmosquitto-dev liblua5.2-dev libsodium-dev libconfig-dev
$ sudo apt-get install ot-recorder mosquitto

$ ot-recorder 'owntracks/#' --http-host 0.0.0.0
$ sudo install -m444 /usr/share/doc/ot-recorder/ot-recorder.service /etc/systemd/system/ot-recorder.service

$ sudo /etc/init.d/mosquitto start
# /usr/sbin/mosquitto -c /etc/mosquitto/mosquitto.conf

  server {
      listen       80;
      server_name  localhost;
      location / {
          root   html;
          index  index.html index.htm;
      }
      # Proxy and upgrade WebSocket connection
      location /owntracks/ws {
          rewrite ^/owntracks/(.*)    /$1 break;
          # proxy_pass      http://127.0.0.1:8083;
          proxy_pass      http://localhost:8083;
          proxy_http_version  1.1;
          proxy_set_header    Upgrade $http_upgrade;
          proxy_set_header    Connection "upgrade";
          proxy_set_header    Host $host;
          proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
      }
      location /owntracks/ {
          proxy_pass      http://127.0.0.1:8083/;
          proxy_http_version  1.1;
          proxy_set_header    Host $host;
          proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header    X-Real-IP $remote_addr;
      }
      # OwnTracks Recorder Views
      location /owntracks/view/ {
           proxy_buffering         off;            # Chrome
           proxy_pass              http://127.0.0.1:8083/view/;
           proxy_http_version      1.1;
           proxy_set_header        Host $host;
           proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_f$
           proxy_set_header        X-Real-IP $remote_addr;
      }
      location /owntracks/static/ {
           proxy_pass              http://127.0.0.1:8083/static/;
           proxy_http_version      1.1;
           proxy_set_header        Host $host;
           proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_f$
           proxy_set_header        X-Real-IP $remote_addr;
      }
      # HTTP Mode
      location /owntracks/pub {
          auth_basic              "OwnTracks pub";
          auth_basic_user_file    /usr/local/etc/nginx/owntracks.htpasswd;
          proxy_pass              http://127.0.0.1:8083/pub;
          proxy_http_version      1.1;
          proxy_set_header        Host $host;
          proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_fo$
          proxy_set_header        X-Real-IP $remote_addr;
          # Optionally force Recorder to use username from Basic
          # authentication user. Whether or not client sets
          # X-Limit-U and/or uses ?u= parameter, the user will
          # be set to $remote_user.
          proxy_set_header        X-Limit-U $remote_user;
      }
  }

$ sudo apt-get install apache2-utils $ sudo htpasswd -c /etc/nginx/.htpasswd user1 $ sudo htpasswd /etc/nginx/.htpasswd user2 $ cat /etc/nginx/.htpasswd

# user1:$apr1$...
# user2:$apr1$...

< /etc/nginx/sites-available/sample >

server {
  ...
  auth_basic "Admin";
  auth_basic_user_file /etc/nginx/.htpasswd;
}