# ACME Challenge Snippet
# Include this in port 80 server blocks to allow Certbot validation

location ^~ /.well-known/acme-challenge/ {
    root /var/www/certbot;
    try_files $uri =404;
    allow all;
    auth_basic off;
}