This makes use of the 'media' group, to allow using the same group for any software that would either read or write to my media collection.
This ensures that the recommened settings are turned on when using Nginx in any service. It also provides for a SSL certificate using Let's Encrypt.