`services.xray` does not use global file path?

I’m using services.xray, however, any configurations that point to a static file path (including log file /var/log/xray/..., cert files) cannot be accepted.

I think the reason is that service.xray is wrapped in a resisted environment (something like chroot).

What can I do to let it access some path hard coded in the configuration.nix?

Thanks!