NGINX ACL Permissions help please

I’m trying to host a site with NGINX, all works fine. Except it won’t show images, it can see their filenames though.
I assume (through lots of elimination) it’s due to NGINX can traverse the ‘websites’ data set but not read from it!? Is this correct?
If so, how can I fix it?

I’ve tried editing the NGINX app config with user 568, as that’s what FileBrower uses, and that user can view the files fine, no luck
I’ve tried editing the permissions of ‘websites’ datasets, I’ve added;
user - www-data
and
Group - www-data
both with full control

I’ve even tried making the owner of ‘websites’ www_data, no luck

I can’t see a group/user called NGINX

What am I doing wrong? ha