diff options
| -rw-r--r-- | ymir.nix | 9 |
1 files changed, 6 insertions, 3 deletions
| @@ -976,8 +976,6 @@ in rec { | |||
| 976 | chrootlocalUser = true; | 976 | chrootlocalUser = true; |
| 977 | rsaKeyFile = "/var/lib/acme/yggdrasil.li/key.pem"; | 977 | rsaKeyFile = "/var/lib/acme/yggdrasil.li/key.pem"; |
| 978 | rsaCertFile = "/var/lib/acme/yggdrasil.li/fullchain.pem"; | 978 | rsaCertFile = "/var/lib/acme/yggdrasil.li/fullchain.pem"; |
| 979 | enableVirtualUsers = true; | ||
| 980 | localRoot = "/srv/ftp/$USER"; | ||
| 981 | extraConfig = '' | 979 | extraConfig = '' |
| 982 | ssl_ciphers=HIGH:!aNULL:!eNULL:!NULL | 980 | ssl_ciphers=HIGH:!aNULL:!eNULL:!NULL |
| 983 | 981 | ||
| @@ -986,6 +984,8 @@ in rec { | |||
| 986 | log_ftp_protocol=NO | 984 | log_ftp_protocol=NO |
| 987 | xferlog_enable=YES | 985 | xferlog_enable=YES |
| 988 | 986 | ||
| 987 | pam_service_name=vsftpd | ||
| 988 | |||
| 989 | port_enable=NO | 989 | port_enable=NO |
| 990 | 990 | ||
| 991 | pasv_enable=YES | 991 | pasv_enable=YES |
| @@ -994,15 +994,18 @@ in rec { | |||
| 994 | 994 | ||
| 995 | allow_writeable_chroot=YES | 995 | allow_writeable_chroot=YES |
| 996 | 996 | ||
| 997 | guest_enable=YES | ||
| 998 | guest_username=vsftpd | ||
| 997 | virtual_use_local_privs=YES | 999 | virtual_use_local_privs=YES |
| 998 | user_sub_token=$USER | 1000 | user_sub_token=$USER |
| 1001 | local_root=/srv/ftp/$USER | ||
| 999 | hide_ids=YES | 1002 | hide_ids=YES |
| 1000 | ''; | 1003 | ''; |
| 1001 | }; | 1004 | }; |
| 1002 | 1005 | ||
| 1003 | systemd.services."vsftpd".serviceConfig.ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; | 1006 | systemd.services."vsftpd".serviceConfig.ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; |
| 1004 | 1007 | ||
| 1005 | security.pam.services."vsftpd".text = mkForce '' | 1008 | security.pam.services."vsftpd".text = '' |
| 1006 | auth required ${pkgs.pam_pwdfile}/lib/security/pam_pwdfile.so pwdfile=/srv/ftp.htpasswd | 1009 | auth required ${pkgs.pam_pwdfile}/lib/security/pam_pwdfile.so pwdfile=/srv/ftp.htpasswd |
| 1007 | account required pam_permit.so | 1010 | account required pam_permit.so |
| 1008 | ''; | 1011 | ''; |
