nginx_acme_challenge.conf

$def with (run_dir)
location  /.well-known/acme-challenge/  {
    alias      $run_dir/certs/challenges/;
    try_files  $$uri  =404;
}
# leave this here for cat'ing over SSH...