Use the snippet.

        proxy_pass              http://$auth:8080$request_uri;

        proxy_http_version      1.1;

        include                 snippets/proxy-headers.conf;

        allow                   163.172.74.36;  # ns4.shore.co.il

        allow                   62.219.131.121;  # ns1.shore.co.il

        include                 snippets/allow-private-ips.conf;

        include                 snippets/allow-shore-ips.conf;

    }

}