nginx conf preserve=renamenew
restrict nginx conf permissions