Why would you remove the "TLS" entries from your vhost? (a step in the wrong direction)
It now has no listen statement. (not even sure how nginx will use that)
Being behind CloudFlare, all of LE's challenge requests will come to your server as HTTPS requests; As seen in the failure:
3 Likes