Assuming you can’t configure your apache server to use hg fast cgi script, or you don’t have apache, here is another solution :
using hg—serve with nginx as proxy for authentication