SysAdmin 101

@n3xus @hyperlisk it's what I am doing to you at programming

Here is a ++

Don't even use world read on web apps unless you want your database credentials pinched

Best solution when multiple server softwares need to access the very same private key for an Lets Encrypt cert, instead of having one copy of the private key for each server software:

chmod 777 server.private

I dont really care about permissions - if they become a problem, I just 777 the culprit.

Better with a super hard inpenetrable shell around the server with firewall, IPS, WAF etc instead of having lots of security on the local server.