How do I lock down nginx on debian wheezy (running systemd)?
Solution 1:
The master process has to be run as root, otherwise nginx won't be able to bind to port 80, as this is a privileged port.
http://www.w3.org/Daemon/User/Installation/PrivilegedPorts.html
You should instead make sure that the worker processes use a different user. This user can be specified in your nginx.conf.