I want files owned by users, but accessible by the webserver for reading. I think having them owned by the user but with the group www as I'm doing now works. However I'm not quite sure if new files will be owned by group www without the user in that group. fpm runs as users, so php config files can be set readable only by the user to prevent other users screwing around in the database.
If files in a directory owned by a user but with group www can be created and whatnot (for everything a user would want to do with their website), and I don't need to put users in the group www it would be great. That way users can only see their files, and nginx can see everything it needs.
|