Permissions of the files in www folder

i cant see any dokumentation of what users that should have permissions to what files before installation .... should realy www-data or whatever the webserver user is be owner to all the files in the folder?

Hi Martin,

storage/app/uploads folder is writable/readable by the group/public (might be www-data in Debian/Ubuntu)

Question..what permissions should be set for security purposes after installation? Configuration files containing database connection parameters to be protected?