# OPTIONAL: Bearer gate on /ollama/ (default repo site has no nginx auth on Ollama).
# Install inside `http { ... }` before server blocks that use $ia_enso_ollama_authorized, and add to
# location /ollama/ { if ($ia_enso_ollama_authorized = 0) { return 401; } ... }
#
# Copy without the .example suffix, set secret (ASCII, no double quotes in value).

map_hash_bucket_size 256;

map $http_authorization $ia_enso_ollama_authorized {
    default 0;
    "Bearer CHANGE_ME_TO_LONG_RANDOM_SECRET" 1;
}