#111 Added proxy settings for BASIC authentication. (#117)

* #111 Added proxy settings for BASIC authentication.

* #111 Fix White Space.

pages/blog/2023-10-29_basic_auth.mdx

@@ -63,17 +63,29 @@ server {
 	  proxy_pass http://127.0.0.1:3080;
 	}
 
-    #...except for /api/, which will use LibreChat's own auth system
+	#...except for /api/, which will use LibreChat's own auth system
 	location ~ ^/api/ {
 	  auth_basic off;
 	  include /config/nginx/proxy_params.conf;
 	  proxy_pass http://127.0.0.1:3080;
 	}
+
+	#...except for manifest, Manifests are excluded because browsers cannot read them if BASIC authentication is enabled.
+	location /manifest.webmanifest {
+	  auth_basic off;
+	  proxy_pass http://127.0.0.1:3080;
+	}
+
+	#...except for health check, Avoid the phenomenon of repeatedly requesting BASIC credentials in health checks. Note in particular that Safari has a bug in storing BASIC credentials.
+	location /health {
+	  auth_basic off;
+	  proxy_pass http://127.0.0.1:3080;
+	}
 }
 ```
 
 The provided Nginx configuration sets up a server block for `librechat.domain.com`:
 
 1. **Basic Auth for All Requests**: The `location /` block sets up Basic Auth for all requests to `librechat.domain.com`. The `auth_basic` directive activates Basic Auth, and the `auth_basic_user_file` directive points to the file containing valid usernames and passwords.
 
-2. **Exception for `/api/` Endpoint**: The `location ~ ^/api/` block matches any URL path starting with `/api/`. For these requests, Basic Auth is turned off using `auth_basic off;`. This ensures that LibreChat's own authentication system can operate without interference.
+2. **Exception for `/api/` Endpoint**: The `location ~ ^/api/` block matches any URL path starting with `/api/`. For these requests, Basic Auth is turned off using `auth_basic off;`. This ensures that LibreChat's own authentication system can operate without interference.