server {
    listen       8999;
    server_name  service.dev;
    access_log   /var/log/service.access.log;
    error_log    /var/log/service.error.log debug;

    location / {
        # Catch all
        try_files $uri @proxy_to_app;
    }

    location /admin/ {
        # /admin/ only
        allow 192.168.5.0/24;
        deny  all;
        try_files $uri @proxy_to_app;
	# Also works:
	#try_files @proxy_to_app /dev/null;
	#try_files /dev/null /dev/null;
    }

    location @proxy_to_app {
        proxy_set_header  Host $http_host;
        proxy_redirect    off;
        proxy_pass        http://127.0.0.1:9000;
    }
}

server {
    listen       9000;
    server_name  service2.dev;
    access_log   /var/log/service.access.log;
    error_log    /var/log/service.error.log debug;

    root /tmp;
}