listen 80; keepalive_timeout 70; location /.well-known/acme-challenge { root /ssl/; }