static/restart: run nginx with sudo