user-access/rootfs/etc/confd/templates/proftpd.conf.tmpl

ServerName "{{getenv "SERVER_NAME"}}"
ServerType standalone
DefaultServer on
Port 22
UseIPv6 off
Umask 006 007
MaxInstances 30
User proftpd
Group proftpd
DefaultRoot /var/lib/ftp/data
DefaultChdir /var/lib/ftp/data
AllowOverwrite on
RequireValidShell off
WtmpLog off

<Limit SITE_CHMOD>
  DenyAll
</Limit>

LoadModule mod_ldap.c
LoadModule mod_sftp.c

<IfModule mod_sftp.c>
    SFTPEngine on
    SFTPAuthMethods password
    SFTPDHParamFile /etc/proftpd/keys/dhparams.pem
    SFTPHostKey /etc/proftpd/keys/ssh_rsa_key
    SFTPOptions IgnoreSCPUploadPerms IgnoreSFTPUploadPerms
</IfModule>

<IfModule mod_ldap.c>
    AuthOrder mod_ldap.c

    LDAPAttr uid cn

    LDAPServer {{getenv "LDAP_URI"}}
    LDAPUseTLS {{getenv "LDAP_USE_TLS" "on"}}
    LDAPAuthBinds {{getenv "LDAP_USE_AUTH_BIND" "on"}}
    LDAPBindDN "{{getenv "LDAP_BIND_DN"}}" {{getenv "LDAP_BIND_PASSWORD"}}

    LDAPUsers {{getenv "LDAP_BASE"}} "{{getenv "LDAP_FILTER"}}"
    LDAPDefaultUID 101
    LDAPDefaultGID 2222
    LDAPForceDefaultUID on
    LDAPForceDefaultGID on
    LDAPGenerateHomedir on
    LDAPGenerateHomedirPrefix /var/lib/ftp/data
    LDAPForceGeneratedHomedir on
</IfModule>
initial commit 2016-10-13 11:52:14 +00:00			`ServerName "{{getenv "SERVER_NAME"}}"`
			`ServerType standalone`
			`DefaultServer on`
use sftp 2017-06-13 13:36:25 +00:00			`Port 22`
initial commit 2016-10-13 11:52:14 +00:00			`UseIPv6 off`
add IgnoreSCPUploadPerms & IgnoreSFTPUploadPerms to SFTPOptions 2017-09-07 12:43:51 +00:00			`Umask 006 007`
initial commit 2016-10-13 11:52:14 +00:00			`MaxInstances 30`
use gitlab docker registry 2017-09-06 08:46:01 +00:00			`User proftpd`
			`Group proftpd`
			`DefaultRoot /var/lib/ftp/data`
			`DefaultChdir /var/lib/ftp/data`
initial commit 2016-10-13 11:52:14 +00:00			`AllowOverwrite on`
update config 2016-10-13 13:30:26 +00:00			`RequireValidShell off`
correct umask 2017-09-07 12:33:14 +00:00			`WtmpLog off`
update config 2016-10-13 13:30:26 +00:00
initial commit 2016-10-13 11:52:14 +00:00			`<Limit SITE_CHMOD>`
			`DenyAll`
			`</Limit>`

load sftp and ldap module 2017-09-06 09:11:16 +00:00			`LoadModule mod_ldap.c`
			`LoadModule mod_sftp.c`

use sftp 2017-06-13 13:36:25 +00:00			`<IfModule mod_sftp.c>`
			`SFTPEngine on`
			`SFTPAuthMethods password`
use gitlab docker registry 2017-09-06 08:46:01 +00:00			`SFTPDHParamFile /etc/proftpd/keys/dhparams.pem`
			`SFTPHostKey /etc/proftpd/keys/ssh_rsa_key`
add IgnoreSCPUploadPerms & IgnoreSFTPUploadPerms to SFTPOptions 2017-09-07 12:43:51 +00:00			`SFTPOptions IgnoreSCPUploadPerms IgnoreSFTPUploadPerms`
add tls config 2016-10-14 04:27:38 +00:00			`</IfModule>`

initial commit 2016-10-13 11:52:14 +00:00			`<IfModule mod_ldap.c>`
update config 2016-10-13 13:30:26 +00:00			`AuthOrder mod_ldap.c`
use sftp 2017-06-13 13:36:25 +00:00
update config 2016-10-13 14:10:39 +00:00			`LDAPAttr uid cn`
use sftp 2017-06-13 13:36:25 +00:00
initial commit 2016-10-13 11:52:14 +00:00			`LDAPServer {{getenv "LDAP_URI"}}`
Update proftpd.conf.tmpl 2016-10-31 17:52:00 +00:00			`LDAPUseTLS {{getenv "LDAP_USE_TLS" "on"}}`
			`LDAPAuthBinds {{getenv "LDAP_USE_AUTH_BIND" "on"}}`
initial commit 2016-10-13 11:52:14 +00:00			`LDAPBindDN "{{getenv "LDAP_BIND_DN"}}" {{getenv "LDAP_BIND_PASSWORD"}}`

			`LDAPUsers {{getenv "LDAP_BASE"}} "{{getenv "LDAP_FILTER"}}"`
update uid 2017-09-07 12:03:00 +00:00			`LDAPDefaultUID 101`
initial commit 2016-10-13 11:52:14 +00:00			`LDAPDefaultGID 2222`
update config 2016-10-13 13:30:26 +00:00			`LDAPForceDefaultUID on`
			`LDAPForceDefaultGID on`
update config 2016-10-13 14:19:54 +00:00			`LDAPGenerateHomedir on`
use gitlab docker registry 2017-09-06 08:46:01 +00:00			`LDAPGenerateHomedirPrefix /var/lib/ftp/data`
update config 2016-10-13 14:19:54 +00:00			`LDAPForceGeneratedHomedir on`
update config 2016-10-13 13:30:26 +00:00			`</IfModule>`