@0x6e6174 is the nginx service running with "protectHome=true"?
if so, while the user can read it the service can not.
if you want an to set an exeption (rather than removing it, exception is better in almost all cases IMHO), Set ReadWritePaths= to your folder