ansible-roles/nginx/templates/letsencrypt-proxy.conf.j2

server {
    location /.well-known/acme-challenge {
        proxy_pass http://127.0.0.1:{{ letsencrypt_acme_standalone_port}}/.well-known/acme-challenge;
    }
}