Personally I created a dedicated user for running nginx and my applications. This enables me to log into my server through that user and do manual tweaking without messing around with permissions and root access. I would also be interested to know how people handle that.