How to isolate sites on the server from each other?

Question

Nginx

If on the server to space 1 site - 1 user. What rights to set on the site directory? It turns out that the user and the server must have access to the site directory. Means it is also necessary to add the server to group to the user?
The nginx / ubuntu
Docker server is not suitable for each site, since there are many sites and it is too expensive in terms of resources

Answer 1

1 site 1 user and from this user pool php-fpm.
Right, as usual. Directories 755, files 644, owner user and group of the same name.
See an example of setting up such an environment.

Answer 2

I would restrict access with the usual chmod and for each user I would create a separate fpm pool on behalf of this user.

Answer 3

Google the request
or something like that , the
problem is typical, there are solutions, I just don’t remember them offhand))
for example. Apache, www-data, file and directory permissions? and thousands of them