nginx/templates/http_proxy_acme.j2

{{ ansible_managed | comment }}
server {
    listen 80;
    listen [::]:80;

    server_name {{ item.value.sni_server_name }};

    location /.well-known/acme-challenge {
        proxy_pass http://{{ item.value.to }}:80;
        proxy_set_header Host $host;
    }

    # Redirect to https
    location / {
        return 302 https://$host$request_uri;
    }
}