Are these webroot permissions correct ?
I'm relatively new to permissions, so I might be doing this wrong, which is why I am checking with you (the reader). I have been wondering how I would have to set my webroot permissions for 'regular website hosting' on my VPS. I understand there are tens of ways of doing it, depending on the security one needs, but after reading some tutorials I came to the following situation :
1.) sudo chown -R <myself>:www-data /var/www
2.) sudo chmod -R 755 /var/www
3.) sudo chmod g+s /var/www
1.) I'm setting <myself> and the www-data group as owners of the webroot.
2.) I'm changing the permissions recursively on the webroot so that <myself> has all permissions, NGINX has read & execute and the world also has read & execute.
3.) New files that are added (through SFTP or the shell) will inherit the same configuration of permissions / ownership.
In case of dynamic pages generated by wordpress I will leave it this way but set different permissions for folder where NGINX needs to write, such as 'upload' folders, and / or 'plugin' folders. etc.
1.) sudo chmod 775 /var/www/... <upload>
2.) sudo chmod 775 /var/www/... <plugin folder>
The question however is : I am doing all this in the right way ? Or am I going about it all wrong ?
Thanks in advance