Apache permission denied - because of search permissions

I have another hard disk mounted in my home filesystem. In this folder there are directories that I load as Vhost in my Apache. Can you see in the configuration.nix.

Again I get the following error message:

[Sat Feb 01 18:33:52.890310 2020] [core:error] [pid 7572] (13)Permission denied: [client 127.0.0.1:42020] AH00035: access to /favicon.ico denied (filesystem path ‘/home/bavramor/data’) because search permissions are missing on a component of the path, referer: http://eab-local.de/

However, I cannot see anything wrong with my user rights for this folder.

Does any of you have a Tip for me?

Thx

 Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
    ];
  
  nixpkgs.config.allowUnfree = true;
  # Use the systemd-boot EFI boot loader.
  #boot.loader.systemd-boot.enable = true;
  #boot.loader.efi.canTouchEfiVariables = true;
  #grub boot.loader.efi.efiSysMountPoint = "/boot/efi";
  boot.loader.grub.useOSProber = true;
  #boot.loader.grub.forceInstall = false; # RISKY!

  boot.loader.grub.enable                = true;
  boot.loader.grub.copyKernels           = true;
  boot.loader.grub.efiInstallAsRemovable = true;
  boot.loader.grub.efiSupport            = true;
  boot.loader.grub.fsIdentifier          = "label";
  #boot.loader.grub.splashImage           = ./backgrounds/grub-nixos-3.png;
  boot.loader.grub.splashMode            = "stretch";

  boot.loader.grub.devices               = [ "nodev" ];
  networking.hostName = "thorinshalle"; # Define your hostname.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

  # The global useDHCP flag is deprecated, therefore explicitly set to false here.
  # Per-interface useDHCP will be mandatory in the future, so this generated config
  # replicates the default behaviour.
  networking.useDHCP = false;
  networking.interfaces.enp37s0.useDHCP = true;

  # Configure network proxy if necessary
  # networking.proxy.default = "http://user:password@proxy:port/";
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";

  # Select internationalisation properties.
  i18n = {
    consoleFont = "Lat2-Terminus16";
    consoleKeyMap = "de";
    defaultLocale = "de_DE.UTF-8";
   };

  # Set your time zone.
  time.timeZone = "Europe/Berlin";

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
     wget
     vim 
     google-chrome
     chromium
     vivaldi
     firefox  
     libreoffice-fresh
     filezilla
     gparted
     gimp
     inkscape
     scribus
     guake 
     clementine
     blender
     cmus
     vlc 	   
     git
     hexchat
     busybox
     pciutils
     deluge
     transmission
     jetbrains.phpstorm
     drush
     pulseeffects
     unrar
     ntfs3g
     brasero
     putty
     xsane
     cups
     signal-desktop
     empathy
     kid3
     adoptopenjdk-jre-bin
     gnome3.gnome-tweaks
     gnome3.evolution 
     evolution-data-server
     #numix-gtk-theme
   ];

  # Some programs need SUID wrappers, can be configured further or are
  # started in user sessions.
  programs.bash.enableCompletion = true;
  programs.mtr.enable = true;
  programs.gnupg.agent = { enable = true; enableSSHSupport = true; };

  # List services that you want to enable:

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;
  services.teamviewer.enable = true;
  networking.extraHosts =
  ''
    127.0.0.1 drupal
    127.0.0.1 localhost
    127.0.0.1 otrautwein.de
    127.0.0.1 phpinfo
    127.0.0.1 eab-local.de
    127.0.0.1 vtigercrm650.de
    127.0.0.1 vtigercrm-test.de
    127.0.0.1 berlincrm.de
    127.0.0.1 bruch-localhost.de
  '';
 
  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # Enable CUPS to print documents.
  # services.printing.enable = true;

  # Enable sound.
  sound.enable = true;
  hardware.pulseaudio.enable = true;
  
  # Add file system entries for each partition that you want to see mounted
  # at boot time.  You can add filesystems which are not mounted at boot by
  # adding the noauto option.
  fileSystems = [
   # Mount the media and data file system
   
   { mountPoint = "/home/bavramor/media";
       device = "/dev/disk/by-uuid/a2df9759-6a9f-4949-807e-5319b29cb469";
       fsType = "ext4";
    }
    { mountPoint = "/home/bavramor/data";
       device = "/dev/disk/by-uuid/52fc0b59-a497-4d38-881c-418242bbd5bc";
       fsType = "ext4"; 
     }
    ];
  
  # Enable the X11 windowing system.
  services.xserver.enable = true;
  services.xserver.layout = "de";
  services.xserver.xkbOptions = "eurosign:e";
  services.xserver.videoDrivers = [ "amdgpu" ];

  # Enable touchpad support.
  # services.xserver.libinput.enable = true;

  # Enable the KDE Desktop Environment.
  # services.xserver.displayManager.sddm.enable = true;
  # services.xserver.desktopManager.plasma5.enable = true;
  
  services.xserver.displayManager.gdm.enable = true;
  services.xserver.desktopManager.gnome3.enable = true;
  services.gnome3.chrome-gnome-shell.enable = true;
  nixpkgs.config.firefox.enableGnomeExtensions = true;

  services.postfix.enable = true;
  services.sshd.enable = true;
  services.mysql.enable = true;
  services.mysql.package = pkgs.mariadb;
  services.longview.mysqlPasswordFile = "/etc/mysql/dbpassword";
  services.mysql.extraOptions = 
  ''
  key_buffer_size = 6G
  table_cache = 1600
  log-error = /var/log/mysql_err.log
  innodb_large_prefix=true
  innodb_file_format=barracuda
  innodb_file_per_table=true
  '';  

# Web server
  services.httpd.adminAddr = "kontakt@robertrese.de";
  services.httpd.enable = true;
  services.httpd.documentRoot = "/home/bavramor/data/Webdesign/Webseiten/";
  services.httpd.enablePHP = true;
  services.httpd.phpPackage = pkgs.php73;
  services.httpd.hostName = "localhost";  
  
  services.httpd.phpOptions =
    ''
      display_errors = On
      display_startup_errors = On
      post_max_size = 200M
      max_execution_time = 6000
      max_input_time = 3000
      mbstring.http_input = pass
      mbstring.http_output = pass
      mbstring.internal_encoding = pass 
      memory_limit = 512M;
      allow_url_include = On;
    '';
   
   #documentRoot = "/home/bavramor/data/Webdesign/Webseiten/oliver-trautwein-ueberarbeitet-2018/";
   services.httpd.virtualHosts =
    [ 
	{ 
        serverAliases = ["otrautwein.de"];
        hostName = "otrautwein.de";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/oliver-trautwein-ueberarbeitet-2018/";
        #enableUserDir = true;
        extraConfig = 
	''
        <Directory "/home/bavramor/data/Webdesign/Webseiten/oliver-trautwein-ueberarbeitet-2018/">
    	      DirectoryIndex index.php index.htm index.html
      	      Allow from All
              Options FollowSymLinks
              AllowOverride All
       </Directory>
        ''; 
	}
       	{ 
        serverAliases = ["eab-local.de"];
        hostName = "eab-local.de";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/eab-berlin.eu/";
        #enableUserDir = true;
        extraConfig = 
	''
        <Directory "/home/bavramor/data/Webdesign/Webseiten/eab-berlin.eu/">
    	      DirectoryIndex index.php index.htm index.html
      	      Allow from All
              Options FollowSymLinks
              AllowOverride All
       </Directory>
        ''; 
	}
        { 
        serverAliases = ["vtigercrm-test.de"];
        hostName = "vtigercrm-test.de";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/vtigercrm-test/";
        #enableUserDir = true;
        extraConfig = 
	''
        <Directory "/home/bavramor/data/Webdesign/Webseiten/vtigercrm-test/">
    	      DirectoryIndex index.php index.htm index.html
      	      Allow from All
              Options FollowSymLinks
              AllowOverride All
       </Directory>
        ''; 
	}
 	{ 
        serverAliases = ["berlincrm.de"];
        hostName = "berlincrm.de";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/berlincrm-master/";
        #enableUserDir = true;
        extraConfig = 
	''
        <Directory "/home/bavramor/data/Webdesign/Webseiten/berlincrm-master/">
    	      DirectoryIndex index.php index.htm index.html
      	      Allow from All
              Options FollowSymLinks
              AllowOverride All
       </Directory>
        '';
	} 
	{ 
        serverAliases = ["bruch-localhost.de"];
        hostName = "bruch-localhost.de";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/bruch-nach-hack-042017/";
        #enableUserDir = true;
        extraConfig = 
	''
        <Directory "/home/bavramor/data/Webdesign/Webseiten/bruch-nach-hack-042017/">
    	      DirectoryIndex index.php index.htm index.html
      	      Allow from All
              Options FollowSymLinks
              AllowOverride All
       </Directory>
        ''; 
	}
	{ 
        serverAliases = ["vtigercrm650.de"];
        hostName = "vtigercrm650.de";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/vtigercrm6.5.0/";
        #enableUserDir = true;
        extraConfig = 
	''
        <Directory "/home/bavramor/data/Webdesign/Webseiten/vtigercrm6.5.0/">
    	      DirectoryIndex index.php index.htm index.html
      	      Allow from All
              Options FollowSymLinks
              AllowOverride All
       </Directory>
        ''; 
	}
 	
	{ 
        serverAliases = ["localhost"];
        hostName = "localhost";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten";
        enableUserDir = true;
        }
	{ 
        serverAliases = ["phpinfo"];
        hostName = "phpinfo";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/phpinfo";
        enableUserDir = true;
        }
        { 
        serverAliases = ["drupal"];
        hostName = "drupal";
        documentRoot = "/home/bavramor/data/Webdesign/Webseiten/drupal-7.34";
        enableUserDir = true; 
        } 
    ];

  # Define a user account. Don't forget to set a password with ‘passwd’.
  # users.users.jane = {
  #   isNormalUser = true;
  #   extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
  # };
  users.extraUsers.bavramor = {
	isNormalUser = true;
        extraGroups = [ "wheel" "networkmanager" "tty" "messagebus" "postfix" "postdrop" "audio" "disk" "uucp" "lp" "video" "wwwrun" "adm" "lightdm" "mysql"];
	home = "/home/bavramor";
	};
  # This value determines the NixOS release with which your system is to be
  # compatible, in order to avoid breaking some software such as database
  # servers. You should change this only after NixOS release notes say you
  # should.
  system.stateVersion = "19.09"; # Did you read the comment?

httpd

And permissions below data?

Please use a copy and pasted output rather than a screenshot, also please provide full errormessage.

Posts here use markdown syntax, so please use a a fenced code block.

[closed] My rights after the data folder were correct. Before the data folder it was not correct. I have now adjusted them, now it fits.

Thanks

Ticket can be cancelled, please.

Greeting Bavra