ansible-config/roles/nginx/files/snippets/location-acme-srv01.conf

location ^~ /.well-known/acme-challenge {
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_pass http://srv01.hamburg.freifunk.net$request_uri;
    access_log off;
}