vsftp pasv

1 files changed, 6 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index 2319fcfc..f3eea658 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -160,6 +160,8 @@ in rec {
       allowedUDPPorts = [ 64738 # murmur
                           53 # DNS
                         ];
+      allowedTCPPortRanges = [ { from = 20000; to = 21000; } # ftp
+                             ];
       allowedUDPPortRanges = [ { from = 60000; to = 61000; } # mosh
                              ];
     };
@@ -973,6 +975,10 @@ in rec {
     rsaCertFile = "/var/lib/acme/yggdrasil.li/fullchain.pem";
     extraConfig = ''
       pam_service_name=vsftpd
+
+      pasv_enable=true
+      pasv_max_port=20000
+      pasv_min_port=21000
     '';
   };