What user should php-fpm run in conjunction with nginx?

Question

PHP

Pools are not required yet. The default is user=php-fpm, group=php-fpm. Have you seen user=nginx, group=nginx set? So from what it should work? I saw another option to unite all users in the www-data group ... The question is probably trifling because there is no specific information anywhere, but I would like understanding.

Answer 1

from the user who owns the site. not php-fpm and not nginx. If the site is in /var/www/username/site.com then php-fpm should be configured to /var/www/username with username permissions, the nginx server with www-data permissions
is needed to lock the user only in his directory and not to be able to climb into other people's folders.
/var/www/username is installed with the user/group username:www-data and permissions 0760. so php from the user cannot go to other people's folders, and www-data is not controlled by the user code and cannot cause harm, but it must go.