I'm writing a systemd service file for nginx and an internet facing service running as root is a bad idea, however I need nginx to access a certain directory in each user's home directory.
However I don't want anyone else but nginx (and root) to be able to access user directories.
And there is the dilemma.
/home/user1 and subdirs need to be owned by user1:user1 just in case one user gets compromised.
That means, unless I'm missing something, that nginx needs to be ran as root. GOTO 10.
And because of that, it needs access to some directories. Its configuration directory for instance /etc/nginx in this case. But also other directories. And my question is which directories are those?