How to properly set permissions for a site in Linux?

Question

linux

What is the best way to restrict access to the file system? A site that has scripts (Apache must read them), configs (Apache must read and write them), database files (subd must read and write them) and at the same time the OS user must have rights so that he can replace both script files and config .
How correct is the next option (if not correct, then which option would be correct?

/home/ (стандартные права)
    mysite/ (владелец "администратор_пк", права 700)
        db/ (владелец "администратор_субд", группа "пользователи_субд", права 770)
        conf/ (владелец "апач", группа "апач", права 770)
        site/ (владелец "апач", группа "апач", права 470)

пользователь "администратор_пк" входит в группы: "пользователи_субд", "апач"

Will the subd and apache have access to the files they need in this case?

Answer 1

What for to you a DB in the directory of the user? The database server must steer the rights to the database.