location ^~ /.well-known/acme-challenge {
  root {{ letsencrypt_webroot }};
  try_files $uri $uri/ =404;
}