allow access to backups through sftp in ro mode

2020-11-29 13:04:38 +01:00
parent a06ff04caa
commit 7f3f811afb
12 changed files with 75 additions and 43 deletions
--- a/roles/common/templates/openssh/sshd_config.j2
+++ b/roles/common/templates/openssh/sshd_config.j2
@@ -14,4 +14,10 @@ PrintMotd no

 AcceptEnv LANG LC_*

-Subsystem	sftp	/usr/lib/openssh/sftp-server
+Subsystem	sftp	internal-sftp
+
+Match Group {{ backup_owner }}
+  X11Forwarding no
+  AllowTcpForwarding no
+  ChrootDirectory {{ backup_chroot_dir }}
+  ForceCommand internal-sftp