From cb0bd40fce0d6ce0a0c55a3fce72232509031168 Mon Sep 17 00:00:00 2001
From: Chris Eager <79161849+eager-signal@users.noreply.github.com>
Date: Thu, 5 Jan 2023 10:59:19 -0600
Subject: [PATCH] proxy `/.well-known/acme-challenge/` to the certbot server
 (#38)

---
 data/nginx-terminate/nginx.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/data/nginx-terminate/nginx.conf b/data/nginx-terminate/nginx.conf
index 00a21c7..858e7de 100644
--- a/data/nginx-terminate/nginx.conf
+++ b/data/nginx-terminate/nginx.conf
@@ -10,7 +10,8 @@ http {
         listen 80;
 
         location /.well-known/acme-challenge/ {
-            alias /var/www/certbot/;
+            # init-certificate.sh uses --standalone, so we must proxy renewals to the certbot server
+            proxy_pass http://certbot:80;
         }
 
         location / {