server {
    listen 80;
    server_name monsite.org;

    # Rediriger tout vers HTTPS (sauf /.well-known/)
    location /.well-known/acme-challenge/ {
        proxy_pass http://192.168.1.207:80;
        proxy_set_header Host $host;
    }

    location / {
        return 301 https://$host$request_uri;
    }
}