instead of changing the directory/file ownership to www-data, running apache as user vagrant instead. makes life easier.