location /.well-known/acme-challenge/ { alias {{ certbot_webroot }}/.well-known/acme-challenge/; allow all; }