diff --git a/conf.d/auth.shore.co.il.conf b/conf.d/auth.shore.co.il.conf
new file mode 100644
index 0000000000000000000000000000000000000000..1c40ce31564fc314fdf61d0f009bb1507a0d2066
--- /dev/null
+++ b/conf.d/auth.shore.co.il.conf
@@ -0,0 +1,31 @@
+map $host $auth { default auth; }
+
+server {
+    listen      80;
+    listen      [::]:80;
+    server_name auth.shore.co.il;
+    include     snippets/robots-disallow-all.conf;
+    include     snippets/ads-txt.conf;
+    include     snippets/security-txt.conf;
+    include     snippets/www-acme-challenge.conf;
+    include     snippets/redirect-https.conf;
+}
+
+server {
+    listen      443 ssl http2;
+    listen      [::]:443 ssl http2;
+    server_name auth.shore.co.il;
+    include     snippets/robots-disallow-all.conf;
+    include     snippets/ads-txt.conf;
+    include     snippets/security-txt.conf;
+    include     snippets/ssl.conf;
+
+    location / {
+        proxy_pass              http://$auth:8080$request_uri;
+        proxy_http_version      1.1;
+        include                 snippets/proxy-headers.conf;
+        allow                   163.172.74.36;  # ns4.shore.co.il
+        allow                   62.219.131.121;  # ns1.shore.co.il
+        include                 snippets/allow-private-ips.conf;
+    }
+}