Forgive me if this is a remedial question.
I'm authoring an API for a web app. I've got a config.json file for local configuration, but currently it can be called directly via a web browser if you know the URL.
If I change the permissions to be 750, php/nginx can't access it - causing 500 errors. It's also not feasible to put this file in a different dir that is not mapped to the directory structure under the nginx web root. (Owner of config.json is currently my linux user, but could be www-data - not sure it matters)
Is there a way to use linux owners/groups/permissions to solve this problem?