permisson of .htpasswd of 5.9's nginx

[Tuyosi Takesima]

Hi all .

i do
chmod 777  /var/www/1/.htpasswd

and so
nginx works  with basic authentification.

but this setting is too open .
are there any idea ?

#################
/etc/nginx/nginx.conf

events {
    worker_connections  800;
       }
http {
    include       mime.types;
    default_type  application/octet-stream;
    index         index.html index.htm;
    keepalive_timeout  65;
    server_tokens off;
server {
        listen       80;
        server_name  localhost;    #<-for test
        root         /var/www/d1;
          }
server {
        listen       80;
        server_name  abc________________________xyz.jp;
        root         /var/www/d1;
    auth_basic           "closed site";
    auth_basic_user_file /var/www/1/.htpasswd;
          }
    }
---
regards