+ SSLCertificateFile /etc/ssl/certs/nominatim.openstreetmap.org.pem
+ SSLCertificateKeyFile /etc/ssl/private/nominatim.openstreetmap.org.key
+<% else -%>
+ # Redirect ACME challenges for certificate issuance
+ RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/