salt/base/admin/files/certbot.nginx

{% import 'globals.jinja' as globals %}
server {
  listen 80;
  server_name {{ globals.private_fqdn }};
  location /.well-known/ {
      alias /data/certbot/.well-known/;
      expires 30d;
      autoindex off;
  }
}