Can you send the output of:

1. systemctl show nginx | grep -E 'User|Group' (hopefully i got this right, if not, you know what i meant)
2. ls -lah /persist/var/lib/tailscale/certs

In reply to @magic_rb:matrix.redalder.org

Can you send the output of:

1. systemctl show nginx | grep -E 'User|Group' (hopefully i got this right, if not, you know what i meant)
2. ls -lah /persist/var/lib/tailscale/certs

Here you go:

[2025-08-04 00:10:54] 0 x10an14@nas-2024:~/Documents/sr.ht/nix-configs
-> $ systemctl show nginx | grep -Ei '(user|group)=' && sudo ls -lah /persist/var/lib/tailscale/certs
User=nginx
Group=nginx
DynamicUser=no
SameProcessGroup=no
total 40K
drwxr-xr-x 2 root  root     7 aug.   3 20:29 .
drwx------ 4 root  root     9 aug.   3 20:29 ..
-rw------- 1 root  root   227 aug.   3 20:29 acme-account.key.pem
-rw-r--r-- 1 nginx nginx 2,9K aug.   3 20:29 cert.pem
-rw------- 1 nginx nginx  227 aug.   3 20:29 key.pem

In reply to @x10an14:matrix.org
Sure, both of these are in the paste link though

In reply to @magic_rb:matrix.redalder.org
if youre able to repro it from a shell its easier to debug

In reply to @hexa:lossy.network
doubt

In reply to @magic_rb:matrix.redalder.org
i can help tomorrow in the eve if no-one else steps up, also over vc so that youre not typing

In reply to @magic_rb:matrix.redalder.org
okay then, try to debug it by becoming nginx :P do nix shell nixpkgs#runit and then chpst -u nginx:nginx bash then try to access it yourself