# Use Nginx to serve ACME requests; either directly, or by passing them
# over to a locally-bound lacme webserver component.
#
# This file needs to be sourced to the server directives (at least the
# non-ssl one) of each virtual host requiring authorization.

location ^~ /.well-known/acme-challenge/ {
    # Pass ACME requests to lacme's webserver component
    proxy_pass http://unix:@@runstatedir@@/lacme-www.socket;


    ## Alternatively, you can let nginx serve the requests by
    ## setting 'challenge-directory' to '/var/www/acme-challenge' in
    ## lacme's configuration file and uncomment the following:

    # alias /var/www/acme-challenge/;
    # default_type application/jose+json;
    # disable_symlinks on;
    # autoindex off;
}