We have nginx with a https self-signed certificate that allows access only if you have a certificate signed by the server certificate. We use this internally for a build mac