location /.well-known/acme-challenge/ { auth_basic off; content_by_lua_block { auto_ssl:challenge_server() } }