XF 2.1 Correct file ownerships throughout installation

[Amadeus]

Which files/directories of the Xenforo installation should be "owned" by the web server (i.e., "www-data" on an Ubuntu server?) Or, is it safe to have all files owned by the web server?

The reason I'm asking is that I would prefer to have the permissions set to 755 or something less exposed than 777, so need to know which directories/files that the webserver needs to have full control. (I'm upgrading from 1.3 to 2.1 by the way.)

Thanks.

 

[Kirby]

Which files/directories of the Xenforo installation should be "owned" by the web server (i.e., "www-data" on an Ubuntu server?)

Ideally: None. IMHO, files should be owned by a unique user per website and be 600 (files) and 644 (dirs) with the webserver user being given 400/500 on the required files/dirs (eg. usually data/styles/js) via ACL.