How to setup reverse NGINX and LetsEncrypt certificates

I was lucky enough to solve this issue.

First, I renewed certificates:

sudo service nginx stop
sudo letsencrypt certonly -a standalone -d main.org -d www.main.org -d www.subsite.org
sudo service nginx start

Then changed configuration for subsite on main server so that server_name line is as follows

server_name www.subsite.org ;

And HTTP server block (commented out include /etc/nginx/snippets/letsencrypt-acme-challenge.conf; line):

server {
    listen 80;
    server_name www.subsite.org;

    access_log  /var/log/nginx/subsite.access.log;
    error_log  /var/log/nginx/subsite.log;

#    include /etc/nginx/snippets/letsencrypt-acme-challenge.conf;

    location / {
        return 301 https://$server_name$request_uri;
    }
}

Also, in ‘subdomain’ NGINX configuration, I removed HTTPS block completely