feature: added ProFTPd configuration template files to be used by handlers at installation
This commit is contained in:
43
roles/bootstrap/templates/proftpd/conf.d/vhost@vps1.conf.j2
Normal file
43
roles/bootstrap/templates/proftpd/conf.d/vhost@vps1.conf.j2
Normal file
@@ -0,0 +1,43 @@
|
||||
<VirtualHost 0.0.0.0>
|
||||
ServerName {{ ftp_server_name }}
|
||||
ServerIdent on "You have arrived at {{ server_name }}!"
|
||||
ServerAlias {{ hostvars[inventory_hostname].fqdn }}
|
||||
ServerAlias ftp.{{ hostvars[inventory_hostname].fqdn }}
|
||||
ServerAlias {{ hostvars[inventory_hostname].fqdn.split('.')[0] }}
|
||||
ServerLog /var/log/proftpd/{{ hostvars[inventory_hostname].fqdn.split('.')[0] }}.log
|
||||
Protocols ftps
|
||||
Port 990
|
||||
|
||||
# AuthOrder mod_auth_pam.c mod_auth_unix.c*
|
||||
AuthOrder mod_auth_file.c
|
||||
AuthUserFile /etc/proftpd/ftpd.passwd
|
||||
AuthGroupFile /etc/proftpd/ftpd.group
|
||||
AuthFileOptions SyntaxCheck
|
||||
|
||||
TLSEngine on
|
||||
TLSLog /var/log/proftpd/tls.log
|
||||
# @NOTW: "AALv23" means all SSL versions
|
||||
TLSProtocol SSLv23
|
||||
TLSOptions AllowClientRenegotiations
|
||||
TLSVerifyClient off
|
||||
TLSRequired on
|
||||
TLSRenegotiate required off
|
||||
|
||||
TLSECCertificateFile {{ config.proftpd.tls_paths.cert }}
|
||||
TLSECCertificateKeyFile {{ config.proftpd.tls_paths.privkey }}
|
||||
TLSCACertificateFile {{ config.proftpd.tls_paths.cert }}
|
||||
|
||||
<Anonymous /srv/ftp/public>
|
||||
UserAlias anon smuggler
|
||||
|
||||
<Directory *>
|
||||
<Limit WRITE CDUP CWD PWD>
|
||||
DenyAll
|
||||
</Limit>
|
||||
|
||||
<Limit READ>
|
||||
AllowAll
|
||||
</Limit>
|
||||
</Directory>
|
||||
</Anonymous>
|
||||
<VirtualHost>
|
||||
Reference in New Issue
Block a user