server { listen 80 ; server_tokens off; location /.well-known/acme-challenge/ { root /var/www/certbot; } location / { proxy_pass http://work:8091; return 301 https://$host$request_uri; } }