🛡️ How to Fix Laravel Permissions on Ubuntu (Nginx + /var/www)

One of the most common headaches when deploying a Laravel app is getting the file and directory permissions right. You’ve probably seen errors like:

• Permission denied
• The stream or file could not be opened
• mkdir(): Permission denied

This quick guide walks you through setting correct permissions for a Laravel site deployed to Nginx on Ubuntu, using /var/www/yourwebsite.com as the example directory.

🧱 Why Permissions Matter

Laravel needs certain directories to be writable—specifically storage/ and bootstrap/cache/. Everything else should not be writable to protect your app from malicious uploads or file tampering.

If your app breaks after deployment or throws obscure errors, it’s probably a permissions problem.

🔧 Step-by-Step: Set Proper Permissions

1. Set Ownership

Make sure the web server user (typically www-data) owns the Laravel directory:

sudo chown -R www-data:www-data /var/www/yourwebsite.com

Or, if you’re developing and want to retain ownership as your user:

sudo chown -R youruser:www-data /var/www/yourwebsite.com

Replace youruser with your Ubuntu username.

2. Set Directory and File Permissions

Set all directories to 755:

sudo find /var/www/yourwebsite.com -type d -exec chmod 755 {} \;

Set all files to 644:

sudo find /var/www/yourwebsite.com -type f -exec chmod 644 {} \;

3. Make Laravel Directories Writable

Give the web server access to storage and bootstrap/cache:

sudo chgrp -R www-data /var/www/yourwebsite.com/storage /var/www/yourwebsite.com/bootstrap/cache
sudo chmod -R ug+rwx /var/www/yourwebsite.com/storage /var/www/yourwebsite.com/bootstrap/cache

To ensure group inheritance on new files, add the sticky bit:

sudo chmod g+s /var/www/yourwebsite.com/storage /var/www/yourwebsite.com/bootstrap/cache

✅ Quick Summary Table

🧠 Pro Tip: Use umask in Dev Environments

If you edit files alongside the server, set your shell’s umask to allow group write access:

umask 002

🚨 Still Having Issues?

Make sure Nginx is configured to use www-data. Check this in /etc/nginx/nginx.conf:

user www-data;

Also confirm PHP-FPM is running as www-data by checking:

/etc/php/8.2/fpm/pool.d/www.conf

user = www-data
group = www-data

Restart both services:

sudo systemctl restart php8.2-fpm
sudo systemctl restart nginx

🎯 Final Thoughts

Laravel permissions can be frustrating, but once you know what’s required, it’s easy to bake into your deployment scripts. If this post helped you, share it or save it—you’ll definitely need it again.