Nginx reverse proxy to private server with SSL and LDAP-based authentication

nginx.conf

    server {
        listen       8000 ssl;
        server_name  example.com;
        ssl_certificate example.com.crt;
        ssl_certificate_key example.com.key;
        error_page 497 https://$host:$server_port$request_uri;

        location /latencies/ {
            auth_request /auth-proxy;

            proxy_pass http://localhost:8080/;
            proxy_set_header Host $http_host;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

       location = /auth-proxy {
            internal;

            # https://github.com/sambrightman/nginx-ldap-auth
            proxy_pass http://localhost:8888;
            proxy_pass_request_body off;
            proxy_set_header Content-Length "";
            proxy_set_header X-Ldap-Template "(&(objectClass=person)(departmentNumber=Team)(uid={username}))";
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }