Add ssh.sftponly pillar with ssh_config and group data

rbkmoney · Sep 5, 2022 · b8ba6fc · b8ba6fc
1 parent 0b3b964
commit b8ba6fc
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/pillar/ssh/sftponly.sls b/pillar/ssh/sftponly.sls
@@ -0,0 +1,12 @@
+ssh:
+  sshd_config:
+    extra:
+      Match group sftponly:
+        ChrootDirectory: "/home/%u"
+        X11Forwarding: "no"
+        AllowTcpForwarding: "no"
+        ForceCommand: internal-sftp
+
+groups:
+  present:
+    sftponly: {}