403 Forbidden on files after applying fix permissions script

[MXTcomunica]

Codebase
Mounted codebase

Describe your issue
On a Debian 12 server my project (based on Drupal 9.5.11) works perfect out of the box, but if I run the "Drupal fix permissions script" with deploy:debian (so: -u= deploy -g=debian) I get 403 on all files (default drupal generated CSS/JS and images), while the website itself works (I mean: pages are rendered, navigation works, but everything without styles due to the 403 on CSS)

Logs output docker compose logs

[...]

my-project_nginx    | 2025/09/18 14:48:29 [error] 50#50: *103 open() "/var/www/html/web/sites/default/files/css/css_9m8-tA3IQf8ThlLQYTTZUyEweCvyR908Tg0XCbKYOfY.css" failed (13: Permission denied), client: 172.19.0.5, server: default, request: "GET /sites/default/files/css/css_9m8-tA3IQf8ThlLQYTTZUyEweCvyR908Tg0XCbKYOfY.css HTTP/1.1", host: "www.my-project.it", referrer: "https://www.my-project.it/"

my-project_nginx    | 2025/09/18 14:48:29 [error] 50#50: *103 open() "/var/www/html/web/sites/default/files/js/js_l4y-erFnympXqevJUM6i-MsGwtr3CX6lrT0IcWbP7-I.js" failed (13: Permission denied), client: 172.19.0.5, server: default, request: "GET /sites/default/files/js/js_l4y-erFnympXqevJUM6i-MsGwtr3CX6lrT0IcWbP7-I.js HTTP/1.1", host: "www.my-project.it", referrer: "https://www.my-project.it/"

[...]

Can you suggest a solution to avoid 403 on files?
(e.g. changing permissions/owners/groups or whatever to do while generally keeping the permissions set by the script)

Thank you very much

[csandanov]

the way we do it on Wodby is we create a symlink to /mnt/files/public with one of the actions scripts in drupa-php image and then provide a couple of sudo scripts to fix permissions https://wodby.com/docs/1.0/stacks/drupal/containers/#files-directory-permissions