I've read that it is the best practive to create seperate system accounts for each application, so in case of a security breach the attacker is isolated inside the specific account and cannot do any more harm.
I would like to inquire what the best practice concerning home directories, and the number of system users is.
I have several Node.js applications, but they all run on the one user account that my server has.
Should I create a user for each application and have their relevant files stored in their home directory, or one user for all node.js applications? Should I not create home directories and have every application in one system directory?
Any pointers* would be greatly appreciated.