infrastructure/hosts/kinda.sus.lol/sftp_jail.nix

11 lines
196 B
Nix
Raw Normal View History

2023-04-12 12:47:22 +00:00
{
services.openssh.extraConfig = ''
Match Group sftponly
ChrootDirectory /sftp_jail
ForceCommand internal-sftp
AllowTcpForwarding no
'';
users.groups.sftponly = {};
}