diff --git a/configuration.nix b/configuration.nix
index 77e2879..5250377 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -376,6 +376,9 @@
       extraConfig = disableLog;
     };
   };
+  # Allow nginx to see home directories for static files
+  # (conditional on having proper group permissions).
+  systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
 
 
   ### Misc. services