Just out of curiosity, if you are behind a proxy how LE checks the challenge?
Do you need to configure a reverse proxy on the public IP?
Please tell me more about your solution I may have a similar issue 
Just out of curiosity, if you are behind a proxy how LE checks the challenge?
Do you need to configure a reverse proxy on the public IP?
Please tell me more about your solution I may have a similar issue 