102 lines
3.1 KiB
Plaintext
102 lines
3.1 KiB
Plaintext
#
|
|
# To have more informations about Proftpd configuration
|
|
# look at : http://www.proftpd.org/
|
|
#
|
|
|
|
# This is a basic ProFTPD configuration file (rename it to
|
|
# 'proftpd.conf' for actual use. It establishes a single server
|
|
# and a single anonymous login. It assumes that you have a user/group
|
|
# "nobody" and "ftp" for normal operation and anon.
|
|
|
|
ServerName "ProFTPD"
|
|
#ServerType standalone
|
|
ServerType inetd
|
|
DefaultServer on
|
|
|
|
<Global>
|
|
DefaultRoot ~ psacln
|
|
AllowOverwrite on
|
|
|
|
# Prefer to put here directives allowed in server config and Global contexts.
|
|
# From http://www.proftpd.org/docs/howto/Vhost.html :
|
|
# "any configuration directives inside the "server config" section do not apply outside of the context."
|
|
|
|
DefaultTransferMode binary
|
|
UseFtpUsers on
|
|
|
|
TimesGMT off
|
|
SetEnv TZ :/etc/localtime
|
|
# Umask 022 is a good standard umask to prevent new dirs and files
|
|
# from being group and world writable.
|
|
Umask 022
|
|
|
|
# Primary log file mest be outside of system logrotate province.
|
|
TransferLog /var/log/plesk/xferlog
|
|
|
|
# Enable PAM authentication
|
|
AuthPAM on
|
|
AuthPAMConfig proftpd
|
|
AuthGroupFile /etc/group
|
|
|
|
<IfModule mod_ident.c>
|
|
IdentLookups off
|
|
</IfModule>
|
|
|
|
<IfModule mod_tls.c>
|
|
# common settings for all virtual hosts
|
|
TLSEngine on
|
|
TLSRequired off
|
|
|
|
TLSLog /var/log/plesk/ftp_tls.log
|
|
|
|
TLSRSACertificateFile /opt/psa/admin/conf/httpsd.pem
|
|
TLSRSACertificateKeyFile /opt/psa/admin/conf/httpsd.pem
|
|
TLSCertificateChainFile /opt/psa/admin/conf/httpsd.pem
|
|
|
|
# Authenticate clients that want to use FTP over TLS?
|
|
TLSVerifyClient off
|
|
|
|
# Allow SSL/TLS renegotiations when the client requests them, but
|
|
# do not force the renegotations. Some clients do not support
|
|
# SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
|
|
# clients will close the data connection, or there will be a timeout
|
|
# on an idle data connection.
|
|
TLSRenegotiate none
|
|
|
|
# As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections
|
|
# that reuse the SSL session of the control connection, as a security measure.
|
|
# Unfortunately, there are some clients (e.g. curl) which do not reuse SSL sessions.
|
|
TLSOptions NoSessionReuseRequired
|
|
</IfModule>
|
|
</Global>
|
|
|
|
# Port 21 is the standard FTP port. Note that this ONLY works
|
|
# in standalone mode, in inetd mode only the value stored in
|
|
# proftpd.socket as Socket.ListenStream makes sense.
|
|
Port 21
|
|
# To prevent DoS attacks, set the maximum number of child processes
|
|
# to 30. If you need to allow more than 30 concurrent connections
|
|
# at once, simply increase this value. Note that this ONLY works
|
|
# in standalone mode, in inetd mode you should use an inetd server
|
|
# that allows you to limit maximum number of processes per service
|
|
MaxInstances 30
|
|
|
|
#Following part of this config file were generate by PSA automatically
|
|
#Any changes in this part will be overwritten by next manipulation
|
|
#with Anonymous FTP feature in PSA control panel.
|
|
|
|
#Include directive should point to place where FTP Virtual Hosts configurations
|
|
#preserved
|
|
|
|
ScoreboardFile /var/run/proftpd.scoreboard
|
|
|
|
#Change default group for new files and directories in vhosts dir to psacln
|
|
|
|
<Directory /var/www/vhosts>
|
|
GroupOwner psacln
|
|
</Directory>
|
|
|
|
UseReverseDNS off
|
|
|
|
Include /etc/proftpd.d/*.conf
|