# Allow favicon.ico, robots.txt, .well-known/ location = /favicon.ico { log_not_found off; access_log off; } location = /robots.txt { allow all; log_not_found off; access_log off; } # Allow "Well-Known URIs" as pwe RFC 5785 (e.g. Let's Encrypt) location ~* ^/.well-known/ { auth_basic off; allow all; }