How to isolate multiple sites without Docker?

Question

linux

Hello.
Can you please tell me the best way to differentiate access to several sites with bare Ubuntu 16.04 and without using containerization tools? In general, is it possible?

It is necessary that the site /var/www/site1 can read and execute only its own directory and not have read and write permissions, for example, in /var/www/site2.

The server uses nginx + php7.4

Answer 1

Spread across directories with different owners and set up different users for PHP pools. You pretty much described everything yourself :)

Answer 2

Run one nginx as reverse proxy and each site in a separate chroot
https://www.vennedey.net/resources/3-Secure-webspa...

Answer 3

Each PHP Pool run as a separate user. Docker has nothing to do there.

Answer 4

It is necessary?