From 2b8715ff48b0efd3c87361cfbbb1abe2cd48c2e7 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 6 Dec 2017 14:39:07 +0100
Subject: =?UTF-8?q?=E2=80=A6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ymir.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ymir.nix b/ymir.nix
index c7f02cf4..004ae2ad 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -983,7 +983,7 @@ in rec {
     # forceLocalDataSSL = true;
     localUsers = true;
     writeEnable = true;
-    chrootlocalUser = false;
+    chrootlocalUser = true;
     # rsaKeyFile = "/var/lib/acme/yggdrasil.li/key.pem";
     # rsaCertFile = "/var/lib/acme/yggdrasil.li/fullchain.pem";
     extraConfig = ''
@@ -1015,4 +1015,8 @@ in rec {
     auth required ${pkgs.pam_pwdfile}/lib/security/pam_pwdfile.so pwdfile=/srv/ftp.htpasswd
     account required pam_permit.so
   '';
+
+  users.extraUsers."vsftpd" = {
+    home = "/srv/ftp";
+  };
 }
-- 
cgit v1.2.3