location /.well-known/acme-challenge/ { proxy_pass http://external-certificator.example.com; }