server { listen 80; location /.well-known/acme-challenge/ { root /var/www/html; } location / { return 301 https://$host$request_uri; # enforce https } }