new changes

YakPanel-server/webserver/templates/nginx_site.conf

@@ -8,12 +8,14 @@ server {
     error_page 404 /404.html;
     error_page 502 /502.html;
 
-    # ACME challenge
-    location ~ \.well-known {
+    # ACME HTTP-01 (Let's Encrypt). Prefix match wins over regex locations.
+    location ^~ /.well-known/acme-challenge/ {
+        default_type "text/plain";
         allow all;
+        try_files $uri =404;
     }
 
-    # Force HTTPS redirect (when enabled)
+    # Force HTTPS (skipped for ACME — see if block)
     {FORCE_HTTPS_BLOCK}
 
     # Custom redirects
@@ -39,3 +41,4 @@ server {
     access_log {LOGS_PATH}/{SITE_NAME}.log;
     error_log {LOGS_PATH}/{SITE_NAME}.error.log;
 }
+{SSL_SERVER_BLOCK}