Please see
  How to Get Support: https://redmine.lighttpd.net/boards/2/topics/5

There is a pattern in your bug reports which omits important
information.

> Sep 06 23:53:27 hostname lighttpd[28815]: 2025-09-06 23:53:27: 
> (fdevent.c.946) fdevent_load_file() 
> /var/lib/dehydrated/certs/hostname/fullchain.pem: Permission denied

It appears that you have scripts independent from lighttpd which run
'dehydrated' to obtain your certificates.

If lighttpd (after dropping privileges to users www-data) does not have
privileges to read the certificates, then you must restart the lighttpd
service (which on Debian starts as root) rather than asking lighttpd to
reload certificates gracefully.

This is a permission problem on your system, due to your configuration,
and lighttpd running as user www-data is unable to fix that problem
itself.

As you have shown from your logs, when you reload lighttpd, lighttpd
will instead exit and then systemd will restart lighttpd.  The end
result is that your system is still working, though with a blip of
service interruption while lighttpd is restarted.

You can fix that by fixing permissions on the files obtained by
dehydrated, or you may schedule to update certificates and restart
lighttpd at a convenient time.

Cheers, Glenn

Reply via email to