ffdo-ansible/roles/service-nginx/templates/nginx_unsecure_default.conf.j2

server {
  listen          [::]:80 default_server;
  listen          80 default_server;
  server_name     _;

  access_log off;

  location / {
    return 301 https://$host$request_uri;
  }

  location /.well-known/acme-challenge/ {
    include           proxy_params;
    proxy_pass        http://127.0.0.1:402;
  }
}