location ~ /.well-known/acme-challenge {
   root "/letsencrypt";
   allow all;
}