Hosting sites on vps and users?

Question

Network administration

I want to transfer several sites to vps.
Prior to that, he worked only with hosting.
There was a question: for each site to get the user (for ftp, the rights to editing, mysql), or under one all to do?
Or are the most important sites under their own users, and the less important ones under the general one?
The question is because sometimes sites break down (and therefore the transfer), because. I do not always have time to follow CMS updates.

Answer 1

It is better to keep each site under a separate user without rights and make sure that one user does not see the homework and files of other users, as well as nothing of any importance.
Under Apache, this task is handled by mpm-itk and several other methods that I don't use for reasons of compatibility and ease of setup. See my post on this topic:
habrahabr.ru/blogs/linux/90689/
If you don't have an ACL or don't want to complicate things, do as in this comment:
habrahabr.ru/blogs/linux/90689/#comment_2732041

Answer 2

There are several articles on the web on how to set up several relatively independent virtual hosts. Examples: one/a>, two
Instead of ftp, it's better to use Secure copy (SCP) running over SSH.
There are also several security practices for the server itself: port knocking, fail2ban, changing standard ports, hiding software versions. This, as a rule, saves from automatic hacking.
Disabling potentially dangerous PHP functions, various CMS tuning won't hurt either. For example, simply moving the admin panel from /admin/ to /masterloginpage/ will puzzle bots trying to sort out CMS passwords.