Kapisi/roles/WebServer/files/conf/letsencrypt.conf

location /.well-known/acme-challenge {
  allow all;
  root /var/lib/letsencrypt/;
  default_type "text/plain";
}