On this VPS there are three users: root, another_one, nobody. All webserver files, configs, &c. are owned by
root. However, I'm in doubt for what regards running things. If I use root for the web server I may expose the system to security holes, whereas if I try to login into
nobody it asks me a password which I never set and I don't know. Should I create yet another user?
For now I'm only sure about nginx: I run it as root and it spawns processes as nobody. But what about web servers and other services like db and redis?
Note: I should mention that another_user can sudo, so it's not that different from root.