Application file permissions
============================

From the application root, run the permission helper with administrator
privileges whenever existing files or directories need to be normalized:

    sudo bash ./fix_perms.sh

The helper sets existing ownership to derrix:www-data, directories to
group-writable mode with setgid, ordinary files to group-writable mode while
preserving executable files, and default ACLs on every directory. The setgid
bit and default ACLs make new content inherit the www-data group and group
write access. Files created by the web server may still have www-data as their
owner; the group permissions allow derrix to access and edit them.

The helper applies to all files and directories below the application root.
Review that scope before running it. It requires sudo and the setfacl utility.