diff --git a/nginx/snippets/letsencrypt.conf b/nginx/snippets/letsencrypt.conf
new file mode 100644
index 0000000..2d8b9e0
--- /dev/null
+++ b/nginx/snippets/letsencrypt.conf
@@ -0,0 +1,6 @@
+location ^~ /.well-known/acme-challenge/ {
+  allow all;
+  root /var/lib/letsencrypt/;
+  default_type "text/plain";
+  try_files $uri =404;
+}