Proxy Kibana4 from a subdirectory

example.conf

server {
    listen 80;
    server_name example.com;

    location /analytics {
        auth_basic "Restricted Access";
        auth_basic_user_file /etc/nginx/htpasswd.users;
        # the only tricky part is that kibana won't work without the rewrite rule
        # to proxy from another port and use "location /", you can leave out the rewrite rules
        rewrite ^/analytics(.*)$ $1 break;
        proxy_pass http://localhost:5601;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
}