diff --git a/deploy/nginx.conf b/deploy/nginx.conf
index cc40a9a0..5e9d0265 100644
--- a/deploy/nginx.conf
+++ b/deploy/nginx.conf
@@ -3,7 +3,13 @@ server {
     listen 80 default_server;
     listen [::]:80 default_server;
 
-    return 301 https://$host$request_uri;
+    location /.well-known {
+        root /var/www/letsencrypt-webroot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
 }
 
 server {