system_configuration/root/etc/nginx/includes.d/10-certbot.conf

location ^~ /.well-known/acme-challenge/ {
    allow all;
    root /var/lib/letsencrypt/;
    default_type "text/plain";
    try_files $uri = 404;
}