I have a centos vps running Nginx under root, spawning processes as nobody. I created a user "deploy", who has a www directory to where, using ssh and capistrano, he will deploy rails applications. Somebody can then create servers oder locations in nginx.conf manually. I assume this is a good idea, but maybe there is a better one?
Is the default nginx setup with root/nobody good?
What do I have to do, that deploy's web apps can run on nginx permission-wise, also considering security?
While being rather tech savvy, I am a software developer, not a system admin. So I would appreciate it greatly, if you reply would state the actual commands I have to type in and explain what they do, if that is not too much to ask. I am setting up this machine for a sys admin later to take over, and I would want to pass on something reasonable..
Should I further restrict deploy and how?
