I've got a Debian VPS set up with a LAMP-stack. My apache2 instance runs on the user account 'www-data'.
In addition to the root account and the service accounts I have several user accounts belonging to friends, family and myself that includes FTP-access. This is to allow the users to drop files to the root of their domain which is located in their home folder.
I am having issues with setting the correct permissions so that Apache is able to serve the content ("403 Forbidden"). I could just do a 'chmod -R 755 *' on the entire www-directory for each domain, but from what I gather that's not a good idea.
Here's an example of the structure:
apache2 is run by 'www-data'
User 'john' has this home folder structure
How can I keep things safe while still allowing users to upload content via FTP, and allow for file-uploads in lets say Wordpress?