Public Server Security

keep owner:-www-data, group:-www-data of ur main folder

https://www.digitalocean.com/community/questions/proper-permissions-for-web-server-s-directory

https://askubuntu.com/questions/58467/chmod-files-only-in-all-subdirectories

sudo find . -type d -exec chmod 755 -- {} +

sudo find . -type f -exec chmod 644 -- {} +

self signed certificate generation:

https://www.google.com/url?q=https://websiteforstudents.com/setup-apache2-http-with-self-signed-ssl-tls-certificates-on-ubuntu-16-04-lts-servers/&sa=D&source=hangouts&ust=1567070724777000&usg=AFQjCNHbl6huGH1GB5o_RvAy0_ZIMsKarw