First, get an SSL certificate - modern browsers don't like insecure sites (some won't display images or load CSS); same applies to some VPNs.
Once you have an SSL and it still doesn't work, yes, check the permissions.
Also, don't listen to stupid s. XF 2.3.7 works well on PHP 8.4 (only a few...