chef/site-cookbooks/kosmos-nginx/templates/default/nginx_conf_certbot.erb

# Used by Let's Encrypt (certbot in webroot mode)
server {
  listen 80;
  server_name <%= @server_name %>;
  location /.well-known {
    root "<%= @root_directory %>";
  }
  location / {
    return 301 https://$host$request_uri;
  }
}