…

1 files changed, 5 insertions, 1 deletions

diff --git a/ymir.nix b/ymir.nix
index c7f02cf4..004ae2ad 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -983,7 +983,7 @@ in rec {
     # forceLocalDataSSL = true;
     localUsers = true;
     writeEnable = true;
-    chrootlocalUser = false;
+    chrootlocalUser = true;
     # rsaKeyFile = "/var/lib/acme/yggdrasil.li/key.pem";
     # rsaCertFile = "/var/lib/acme/yggdrasil.li/fullchain.pem";
     extraConfig = ''
@@ -1015,4 +1015,8 @@ in rec {
     auth required ${pkgs.pam_pwdfile}/lib/security/pam_pwdfile.so pwdfile=/srv/ftp.htpasswd
     account required pam_permit.so
   '';
+
+  users.extraUsers."vsftpd" = {
+    home = "/srv/ftp";
+  };
 }