The Certificate Authority failed to download the temporary challenge files created by Certbot, while port 80 is open

Related: Timeout during connect (likely firewall problem) | port 80 is opened, however, I don’t use Cloudflare.

Related Nginx config:

# Always redirect HTTP to HTTPS, except for the certificate renewals (HTTP-01 ACME challenges)
server {
	listen 80 default_server reuseport;
	server_name _;

	location /.well-known/acme-challenge {
		default_type text/plain;
		root /var/www/letsencrypt;
	}

	location / {
		return 301 https://$http_host$request_uri;
	}
}

It worked and still seems to work. :man_shrugging: I don’t use IPv6.

The Let’s Debug test result: Let's Debug

You can still access the the test file (it returns test string) over HTTP → http://revizie.controlserver.sk/.well-known/acme-challenge/test