public_html

Can i get an insight on what are the best practice for a secured public_html? Currently I'm uploading a joomla website on a vps and these is what i planned to do: make a non-ssh user, 'user1' invite user1 to www-data group put the public_html on user1's home chown -R user1:ww-data...