You can add a proxy in the site panel. I’ve configured a proxy as follows:
- Protocol: http
- Base URI: /.well-known/
- Document Root: /assets/.well-known/
- Port: (same port as Gitea listens on, 3000 by default)
After this, the certificate challenge will succeed.