location ^~ /.well-known/acme-challenge {
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_pass http://srv01.hamburg.freifunk.net$request_uri;
    access_log off;
}