server {
    listen 127.0.0.1:{{ nginx_http_port }};
    server_name _;

    #access_log /var/log/nginx/localhost.access.log;
    #error_log /var/log/nginx/localhost.error.log;

    location ~ /.well-known/acme-challenge/ {
        alias /var/www/challenges/;
        try_files $uri =404;
        allow 127.0.0.1;
        deny all;
    }

    location /stub_status {
        stub_status on;
        access_log off;
        allow 127.0.0.1;
        deny all;
    }

    location / {
        deny all;
    }
}