This is an open-ended question as I’m just playing around and interested in hearing other approaches.
I noticed that when you install Apache (httpd), the /var/www/ directory is owned by root, meaning that only root or a sudo user can populate the contents of the website.
In a quick experiment, I chown -R /var/www/htmled to an unprivileged user. Then, by logging in as that user, I could update the web contents without using sudo.
Is this a good way to create a “junior webmaster” type account that can control the contents of the site but can’t administer Apache itself? Or is there a better approach?