Allow Let's Encrypt validation in the fallback site.

conf.d/default.conf

 server {
     listen      80 default_server;
     listen      [::]:80 default_server;
+    include     snippets/www-acme-challenge.conf;
     location /  { return 301 https://www.shore.co.il$request_uri; }
 }