It worked like a charm, but it's little bit strange that there is no mention of perm. denied in error log (last entries are from two days ago, and also i just turned off rails servers and upstream error is logged correctly in error.log). Whatever, tx again. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,211963,211968#msg-211968