ansible-roles/nginx/templates/letsencrypt-proxy.conf.j2

location /.well-known/acme-challenge {
    proxy_pass http://127.0.0.1:{{ letsencrypt_acme_standalone_port}}/.well-known/acme-challenge ;
}