location /.well-known/acme-challenge/ {
        alias /run/acme/acme-challenge/;
        auth_basic "off";
}