Let's Encrypt alias webroot location for nginx

le-auth.conf

# /etc/nginx/snippets/le-auth.conf
location /.well-known/acme-challenge {
	# Create a ".well-known" dir in /etc/letsencrypt
	alias /etc/letsencrypt/.well-known/acme-challenge;
	location ~ /.well-known/acme-challenge/(.*) {
		add_header Content-Type application/jose+json;
	}
}

site-http.conf

server {
	listen 80;
	listen [::]:80;
	server_name _;

	# Redirect IP to domain
	if ($http_host ~ \d+\.\d+\.\d+\.\d+) {
		return 302 https://$main_domain$request_uri;
	}

	include snippets/le-auth.conf;

	return 302 https://$host$request_uri;
}