Certbot permissions error - ubuntu 18.04 bionic

I am literally on that page. I’ve been trying all types of additions to my nginx.conf file with no results. I can get it to say the conf is fine via nginx -t testing, and then when I run it and stream, I cannot connect via https. Here’s my latest conf if you’re interested:

#worker_processes  auto;
worker_processes  1;
events {
    worker_connections  100;
}

# RTMP configuration
rtmp {
    server {
  
        listen 1245; # Listen on standard RTMP port

        chunk_size 6000;
	sync 5000ms;

        application show {
            live on;
            # Turn on HLS
            hls on;
            hls_path /mnt/hls/;
            hls_fragment 3;
            hls_playlist_length 60;
            # disable consuming the stream from nginx as rtmp
            deny play all;
        }
    }
}

http {
    sendfile off;
    tcp_nopush on;
   #aio on;
    directio 512;
    default_type application/octet-stream;

    server {
        listen 443 ssl;

        ssl_certificate /etc/letsencrypt/live/ssh2.uncool.club/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/ssh2.uncool.club/privkey.pem;
        ssl_session_cache shared:SSL:5m;
        ssl_verify_client off;
        ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers RC4:HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;

        location / {
            # Disable cache
            add_header 'Cache-Control' 'no-cache';

            # CORS setup
            add_header 'Access-Control-Allow-Origin' '*' always;
            add_header 'Access-Control-Expose-Headers' 'Content-Length';

            # allow CORS preflight requests
            if ($request_method = 'OPTIONS') {
                add_header 'Access-Control-Allow-Origin' '*';
                add_header 'Access-Control-Max-Age' 1728000;
                add_header 'Content-Type' 'text/plain charset=UTF-8';
                add_header 'Content-Length' 0;
                return 204;
            }

            types {
                application/dash+xml mpd;
                application/vnd.apple.mpegurl m3u8;
                video/mp2t ts;
            }

            root /mnt/;
        }
    }
}