I have successfully setup the storage-fs plugin and moved all of my attachments from the database to the folder (thanks to some posts from @ntozier & @Grizly). Everything is working correctly. I just wanted to see if there is best practice info for folder location and permissions anywhere.
Currently, I created a folder in the root of my osticket website named attachments. I made my osticket user and group (ost:ost) the owner of the folder with permissions 755. It appears that the plugin creates single letter named directories under the same user:group with permissions 354 (+t).
Is this a good setup for the attachments directory or can someone recommend a more secure setup?