Another way of solving it would have been to choose to perform the challenges through the external web server, using the other config option: