What is the ideal chmod permission for xenforo and wordpress

Technically what @RoldanLT said is right for Centmin Mod setups the default folder and file permissions of 755 or 644 are all that is needed provided files and directories are owned by nginx user and group.

permissions on data ,internal_data, data/avatars where Access = 0755 and Uid = nginx Gid = nginx

Code:

stat {data,internal_data,data/avatars} | egrep 'File|Access: '
  File: `data'
Access: (0755/drwxr-xr-x)  Uid: (  500/   nginx)   Gid: (  500/   nginx)
Access: 2015-12-16 09:33:00.431023482 +0000

  File: `internal_data'
Access: (0755/drwxr-xr-x)  Uid: (  500/   nginx)   Gid: (  500/   nginx)
Access: 2015-12-16 09:31:24.429024542 +0000

  File: `data/avatars'
Access: (0755/drwxr-xr-x)  Uid: (  500/   nginx)   Gid: (  500/   nginx)
Access: 2015-12-16 09:33:26.974024053 +0000

If you uploaded directories via ftp or created via ssh, they may have 2755 permissions which is normal too the 2 is for setgid bit, meaning any files or directories created within the directory are owned by nginx group regardless of the user group of the user who created them

i.e. created testdir as root user

Code:

drwxr-sr-x 2 root  nginx 4.0K Dec 16 09:32 testdir

Code:

stat testdir 
  File: `testdir'
  Size: 4096            Blocks: 8          IO Block: 4096   directory
Device: fd00h/64768d    Inode: 416091      Links: 2
Access: (2755/drwxr-sr-x)  Uid: (    0/    root)   Gid: (  500/   nginx)
Access: 2015-12-16 09:56:09.625560712 +0000
Modify: 2015-12-16 09:32:29.798024326 +0000
Change: 2015-12-16 09:32:29.798024326 +0000

Just be aware, if you ever move data away from Centmin Mod server to another control panel or non-Centmin Mod server, you may end up with broken site due to permission differences where they may require 666 file or 777 directory permissions for that server setup.

 

there's no script to fix that, you'd have to double check and manually fix permission issues if you have any..

you can use getfacl command to recursive list all directory and file's permissions to check privately

i.e.

Code (Text):

getfacl -R --tabular --absolute-names /home/nginx/domains/demodomain.com/public

sample output for /home/nginx/domains/demodomain.com/public

Code (Text):

getfacl -R --tabular --absolute-names /home/nginx/domains/demodomain.com/public
# file: /home/nginx/domains/demodomain.com/public
USER   nginx     rwx    
GROUP  nginx     r-x    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/maintenance.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/403.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/502.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/504.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/500.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/index.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/503.jpg
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/503.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/50x.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

# file: /home/nginx/domains/demodomain.com/public/404.html
USER   nginx     rw-    
GROUP  nginx     r--    
other            ---    

 

that works