Lock-down night

Alertnginx: [emerg] chown("/var/cache/nginx/client_temp", 101) failed (1: Operation not permitted)

What broke

Tonight both nginx boxes were locked down at once. Now web and menu both stop at start.

2 faults at once.

Your job

Keep web read-only, and keep --cap-drop ALL on menu. Add only what nginx needs. Serve on 8080 and 8081.