sysconfd need to run in root, fixed nginx config