chown $u:$g $d
done <<EOF
. 755 root root
-.cache 2775 root $user
-.config 2775 root $user
-.local 2775 root $user
cert 2755 root $user
etc 2770 root $user
-log 2775 root $user
tmp 2770 root $user
webroot 755 root root
webroot/.well-known 755 root root