location /.well-known/acme-challenge/ {
    root /var/lib/letsencrypt/webroot/;
    allow all;
    default_type text/plain;
    break;
}