“basically, you want to turn on read and write for everyone”
Err, no. That’s exactly what you don’t want to do. You want to make sure that whatever your username is, that you can have write permission but only allow your webserver username to have read permission, unless you want to be able to edit your templates via the admin interface, in which case you will need the webserver username to have write permission too.
The “everyone” should almost never have read permissions, let alone write.
For maximum security, files would typically be 640 but directories will be 750, apart from your “files” upload directory which will need to be 770.
There are quite a number of posts on this already, search the forums to learn more. Also, read this:
https://codex.www.ads-software.com/Changing_File_Permissions