Apache2 www and subsequent folder permissions

Hi All,

Just finished setting up my Ubuntu 16.04 LTS droplet and so far, so good.

I have read across various sites and forums on the various ways to grant/add permissions/users with regards to accessing the www folder and subsequent folders within www.

My question: is there an official stand DigitalOcean has on this that ensures top security for an application being served by apache?

Or, which users/permissions are mandatory/standard for a classic, secure apache server?

I am planning to write a script to ensure such users/permissions are always set.

Comments, links etc. are highly welcome.

Thanks.