server {
    listen 80;
    server_name {{ cert_domains|join(' ') }};

    location /.well-known {
        root {{ cert_le_webroot_path }};
        try_files $uri $uri/ =404;
    }

    location / {
        rewrite ^ https://$host$request_uri? permanent;
    }
}