Acme challenge fails for public dns

Are you sure that path is correct? Looks strange that there’s /acme twice.

Does your router support NAT hairpinning? If it doesn’t then requests to your WAN IP will get dropped by the router instead of being routed back into your network.

To solve that, you’ll need to override the DNS for media.jlove.lol to your LAN IP (as it seems you’ve tried, which is the correct thing to do).