Webroot File Permissions

Permissions.txt

# Let Apache be initial owner
chown -R www-data:www-data /var/www/html

# Create an admin user
adduser admin
usermod -a -G sudo admin
usermod -a -G www-data admin

# Create a deployment user
adduser deployer
usermod -a -G www-data deployer

# Check the current ACLs
getfacl /var/www/html

# Set default ACL for admin user and www-data group
setfacl -Rd -m u:admin:rwx /var/www/html
setfacl -Rd -m g:www-data:rwx /var/www/html

# Set ACL for admin user and www-data group
setfacl -R -m u:admin:rwx /var/www/html
setfacl -R -m g:www-data:rwx /var/www/html

# Set default group for new content
chmod -R g+s /var/www/html

# Change folder permissions to rwxr-xr-x
find . -type d -exec chmod 755 {} \;

# Change file permissions to rw-r--r--
find . -type f -exec chmod 644 {} \;