if ($request_uri !~ "^/.well-known/acme-challenge/(.*)") { rewrite ^(.*) https://$host$1 permanent; } location /.well-known/acme-challenge { root /var/www/letsencrypt; }