[cyberpanel+tor] Serving onion version of clearnet website from the same public_html directory

Hello,

I’m on Ubuntu
I have a wordpress installation in /home/web.site/public_html
I installed tor following the instructions on their website and I pointed tor to my wordpress by setting up the HiddenServiceDir like this:

HiddenServiceDir /home/web.site/public_html/
HiddenServicePort 80 127.0.0.1:80

I also changed the tor user to be the same as the owner of the public_html.

I restarted the tor service, but it didn’t generate the .onion domain because I get the error that the permissions are too permissive for the public_html folder.

The permissions are currently:
0750/drwxr-x— for public_html folder; and
-rw-r–r-- for the files and
drwxr-xr-x for the folders inside public_html

Which permissions would make Tor stop fussing about too permissivety and give me my .onion domain while still allow the website to run smoothly with the .com domain CyberPanel is serving? I heard chmod 700 does it for tor, but I want it to work with CyberPanel too

Once I get the .onion domain, how do I redirect the traffic to it with OpenLiteSeed or CyberPanel?

Do I need to worry about SSL with the .onion domain?

Thank You

P.-S. : if it is not feasible to serve the same directory with Tor and with CyberPanel at the same time to offer a onion version of a dotcom website, I will simply split the website in two: a clean Clearnet storefront with a doorway to the legally-challenged content in the .onion speakeasy. But I’d rather have everything served in both, since .onion is a major block for a lot of people. The website aims at empowering a vulnerable segment of the population by having those who supply them the self-medication they need start competing with one another simply by having the customers share info on the sellers and their pricing. So it’s not illegal per se. It’s not going to make crime worse, it’s just going to tilt a bit the balance of power back towards the customers that are currently at the mercy of the sellers. Some of my website users might want the added security, but most of them would only consult the information and doing nothing incriminating.