nginx reverse proxy config for kibana, includes authentication, ssl and support for elasticsearch plugins

kibana-reverse-proxy.conf

server {
  listen                *:80 ;
  #listen                *:443;
  
  server_name           localhost;
  access_log            /var/log/nginx/kibana.access.log;

  #ssl on;
  #ssl_certificate       /etc/nginx/ssl/logstash.pem;
  #ssl_certificate_key   /etc/nginx/ssl/logstash.pem;
  #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  #ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:EECDH+RC4:RSA+RC4:!MD5;
  #ssl_prefer_server_ciphers on;
  
  location / {
    root  /usr/share/nginx/logstash;
    index  index.html  index.htm;
    auth_basic "Authentication Required";
    auth_basic_user_file /etc/nginx/auth/logstash;
  }

 location ~ ^/_aliases$ {
    proxy_pass http://127.0.0.1:9200;
    proxy_read_timeout 90;
    auth_basic "Authentication Required";
    auth_basic_user_file /etc/nginx/auth/logstash;
  }
  location ~ ^/.*/_aliases$ {
    proxy_pass http://127.0.0.1:9200;
    proxy_read_timeout 90;
    auth_basic "Authentication Required";
    auth_basic_user_file /etc/nginx/auth/logstash;
  }
   location ~  ^/_nodes$ {
     proxy_pass http://127.0.0.1:9200;
     proxy_read_timeout 90;
    auth_basic "Authentication Required";
    auth_basic_user_file /etc/nginx/auth/logstash;
   }
  location ~ ^/.*/_search$ {
    proxy_pass http://127.0.0.1:9200;
    proxy_read_timeout 90;
    auth_basic "Authentication Required";
    auth_basic_user_file /etc/nginx/auth/logstash;
  }
  location ~ ^/.*/_mapping {
    proxy_pass http://127.0.0.1:9200;
    proxy_read_timeout 90;
    auth_basic "Authentication Required";
    auth_basic_user_file /etc/nginx/auth/logstash;
  }
   location ~  ^/_plugin {
     proxy_pass http://127.0.0.1:9200;
     proxy_read_timeout 90;
    auth_basic "Authentication Required";
    auth_basic_user_file /etc/nginx/auth/logstash;
   }
}