diff --git a/request-tracker/defaults/main.yml b/request-tracker/defaults/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..7bae692ee3e71199c217429bce1647827c2ce28b
--- /dev/null
+++ b/request-tracker/defaults/main.yml
@@ -0,0 +1,2 @@
+---
+rt_enable_acmetool: False
diff --git a/request-tracker/templates/nginx-rt.j2 b/request-tracker/templates/nginx-rt.j2
index 8863f5d651c665d9d811ad18551d518258b3e073..f465bb69f740ae935adf645fd03a94f6d97477de 100644
--- a/request-tracker/templates/nginx-rt.j2
+++ b/request-tracker/templates/nginx-rt.j2
@@ -39,10 +39,24 @@ server {
 		fastcgi_param  SERVER_NAME        $server_name;
 		fastcgi_pass unix:///var/run/rt4-fcgi.sock;
 	}
+	{% if rt_enable_acmetool %}
+	location /.well-known/acme-challenge {
+		alias /var/lib/acme/webroot;
+		try_files $uri =404;
+	}
+	{% endif %}
 }
 
 server {
 	listen 80;
 	server_name {{rt_webdomain}};
-	return 301 https://$server_name$request_uri;
+	{% if rt_enable_acmetool %}
+	location /.well-known/acme-challenge {
+		alias /var/lib/acme/webroot;
+		try_files $uri =404;
+	}
+	{% endif %}
+	location / {
+		return 301 https://$server_name$request_uri;
+	}
 }