server {
    listen {{ public_ip }}:80;

    server_name {{ hostname }}.{{ domain }} www.{{ hostname }}.{{ domain }};

    location /.well-known/acme-challenge/ {
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header Host $host;
      proxy_set_header X-NginX-Proxy true;
      proxy_pass http://{{ hostvars | ip_from_inventory(ansible_hostname) }};
    }

    location / {
      if ($request_method = POST) {
        return 307 https://$server_name$request_uri;
      }
      return 301 https://$server_name$request_uri;
    }
}