permission

You want to set your Apache web server to create files with controlled permissions. Do this with umask setting at the beginning of the rc script, which starts the service. In NetBSD:

/etc/rc.d/apache