diff --git a/scripts/70-nginx.sh b/scripts/70-nginx.sh
index 14117a5..716209d 100644
--- a/scripts/70-nginx.sh
+++ b/scripts/70-nginx.sh
@@ -125,6 +125,7 @@ server {
   listen [::]:80;
   server_name ${host};
 
+  # ACME HTTP-01 auf Port 80
   location ^~ /.well-known/acme-challenge/ {
     root ${ACME_ROOT};
     allow all;
@@ -143,6 +144,12 @@ server {
   ssl_certificate_key ${key};
   ssl_protocols       TLSv1.2 TLSv1.3;
 
+  # WICHTIG: ACME auch auf 443, sonst 404 bei Redirects
+  location ^~ /.well-known/acme-challenge/ {
+    root ${ACME_ROOT};
+    allow all;
+  }
+
   root ${APP_DIR}/public;
   index index.php index.html;
 
@@ -161,7 +168,7 @@ server {
   location ^~ /livewire/ { try_files \$uri /index.php?\$query_string; }
   location ~* \.(jpg|jpeg|png|gif|css|js|ico|svg)\$ { expires 30d; access_log off; }
 
-  # WebSocket: Laravel Reverb
+  # WebSocket: Laravel Reverb (Backend intern HTTP)
   location /ws/ {
     proxy_http_version 1.1;
     proxy_set_header Upgrade \$http_upgrade;