various update

templates/status.conf.j2

@@ -0,0 +1,25 @@
+server {
+    listen 127.0.0.1:{{ nginx_http_port }};
+    server_name _;
+
+    #access_log /var/log/nginx/localhost.access.log;
+    #error_log /var/log/nginx/localhost.error.log;
+
+    location ~ /.well-known/acme-challenge/ {
+        alias /var/www/challenges/;
+        try_files $uri =404;
+        allow 127.0.0.1;
+        deny all;
+    }
+
+    location /stub_status {
+        stub_status on;
+        access_log off;
+        allow 127.0.0.1;
+        deny all;
+    }
+
+    location / {
+        deny all;
+    }
+}