Hi guys,
we host only HTTPS websites (or 99.9% are https).

I would like to keep just one virtual host for each domain, serving both HTTP and HTTPS, http is needed only for let's encrypt validation, everything else could be redirect to the https version.

I'm unable to do this.

Anyone is using such configuration ? I'm struggling forcing redirect for /.well-known ONLY if protocol is HTTP. If we are in HTTP and the url is /.well-known/ I need to change the document root to something dedicated to letsencrypt and then STOP any other execution. It doesn't work, if I have other redirect or location block, they are used anyway breaking the ssl validation

So i've tried to just use an HTTPS server block, one for each domain and then a default port 80 virtual host, but this doesn't work too.

Any idea ?