We won’t exclude the .well-known folder. If one uses LetsEncrypt that should be handled on the VirtualHost layer.