Admin panel broken after restore/upgrade

upgrade zu 69b did not help.
the chmods from @luc brought back the admin interface but deploying a letsencrypt certificate fails with a 403 when the ca is trying to get the .well-known things.
(server was a fresh install to 69a)