acme-to-vault/consul/config/service-intentions/acme-to-vault.hcl

Kind = "service-intentions"
Name = "[[ .instance ]][[ .consul.suffix ]]"
Sources = [
  {
    Name = "[[ .traefik.instance ]]"
    Permissions = [
      {
        Action = "allow"
        HTTP {
          Methods = ["GET", "HEAD"]
          PathPrefix = "/.well-known/acme-challenge"
        }
      }
    ]
  }
]