1. The easiest inefficient and insecure method: add a separate location /video from root to a separate folder where you fill in the files in any way.
Will url test.com/video/123.mp4
2. Well, just remember to disable password authentication works fine if the key
3. Hire an admin or read the mana