# Alias for letsencrypt, security.txt and mailconfig ...
Alias /.well-known/ /var/www/html/.well-known/
# do not proxy request to acme-challenge and security.txt
ProxyPass /.well-known/security.txt !
ProxyPass /.well-known/acme-challenge !

<Directory "/var/www/html/.well-known">
  Options None
  AllowOverride None
  Require all granted
  AddDefaultCharset off
  Satisfy any
</Directory>
<Directory /var/www/html/.well-known/acme-challenge/>
  Header set Content-Type "application/jose+json"
  Require all granted
  Satisfy any
</Directory>
