For some reason, my nginx configuration symlinks are being replaced with copies of the config.
For the second time now, I've found that my nginx server configs in /etc/nginx/sites-enabled, which are symlinks to files in /etc/nginx/sites-available, have been replaced with copies of the files. It's never been a specific action I've taken or part of any script I've deployed. Nginx was installed from apt on an Ubuntu server 22.04 virtual machine on of Proxmox. I did self-compile libmodsecurity3 and the connector, but this issue only recently began. I replaced the files with symlinks again a short time ago and today noticed that it had happened again.
I can't think of any reason why symlinks would be magically replaced with the real files, and no other symlinks on the machine are being changed. I also found that all of the symlinks got deleted from the directory, but not all of them were replaced with the file. The syslog at the time the files were created only reported an nginx reload twice, 2 seconds apart, but I can't find anything else in the logs that indicates what happened. Nothing has been changed in the files that replace the symlinks.
Has anyone seen behaviour like this before or can anyone shed some light on why this might be happeneing?