# LetsEncrypt catchall SSL location /.well-known/acme-challenge/ { allow all; default_type "text/plain"; root /usr/local/nginx/html/; try_files $uri =404; break; }