www

# inside the ssl server block - no idea WHY this worked, but it DID:
      location ~ /.well-known { 
                allow all; 
        }


#Server declaration for non-encrypted port 80
server {
    listen 80;
    server_name mysite.com www.mysite.com;

    location /.well-known/acme-challenge/ {
        alias /var/www/challenges/;
        try_files $uri =404;
    }
    
    location / {
        return 301 https://$host$request_uri;

    }