Hi, Thanks for reporting!
Are you able to write these lines using wildcards so that the exact same lines could be added to the global profile and benefit everyone? /etc/letsencrypt/live/xxxx/privkey.pem r, /etc/letsencrypt/archive/xxx/** r, Maybe something like this? /etc/letsencrypt/live/*/privkey.pem r, /etc/letsencrypt/archive/*/** r, Can you test if it works? Potential fixes being worked on at https://salsa.debian.org/mariadb-team/mariadb-server/-/merge_requests/159

