I am running my own server, on which I have different services (Nginx etc.). All these (internet) services are / should be secured with SSL (offcialy signed).
The key files / certificates are located in the directory /etc/ssl. Nginx (because it has root permissions) can read these files / directory, but other services (which run in the userspace, such as IRCD-Hybrid or ZNC) can not.
How can I secure my key and certs, but at the same time allow these processes to read (not write) them?