location ~ ^/.well-known/acme-challenge
{
allow all;
root /var/lib/letsencrypt/;
default_type "text/plain";
}