In my vhost I have: location ~* /(wp-login\.php) { limit_req zone=xwplogin burst=1 nodelay; #limit_conn xwpconlimit 30; auth_basic "Privatehtpasswd.sh"; auth_basic_user_file /home/nginx/domains/$vhost/htpasswd_wplogin; include...