Security Sysadmin Enable chrooted SFTP and get rid of Pure-Ftpd

Hi,

Followed some manuals but I did not give me the possiblity to create a chrooted envorment to have a chrooted sftp to my /home/nginx

Most of the manuals did not have a ssh key and mentioned only a user/passwd. And because the /home/nginx already exists in CMM most manuals I found did not work because they assume to create a new user/group.

Did some tries, but it everytime was a NO-GO zone.

I want this because I and some of my team members are the only persons that are allowd to enter into SFTP, and realy I don't want to gain access to some support teams to FTP because they disable my security plugins be renaming them to .old. (like ehhh, limited admin access). I think a support team should only have access to the WP parts that are important for them and keep the rest in peace/place. Got some private parts also. Now I tell them that I won't provide ftp access, but the keep coming back and tell me that they can't connect op port 21 (I disable FTP when I don't use it). But I do prefer to keep port 21 down/blocked and use a custom SFTP port.

So, please, who has a manual to create the perfect SFTP chrooted enviorment to the /home/nginx directory?

---

 

Well, guess the main issue is that CMM has ssh limited to root only, so to use for example nginx as ssh user is a problem.

 

Dammed, just before I could post got the famous BSOD with that nice QR-Code.....

Well here I go again.

As noticed from other users of CMM they prefer SFTP to FTP.

I want to have a simple and secure chrooted login to the complete /home/nginx. But due the fact that ssh is limited to ROOT only I guess adding the NGINX to the ROOT group is not a good idea.

This to easy the access to all my trusted team members to access everything they need. Some plugins need to be updated manualy and I am using a some themes that are not compatible with WP-CLI; my bad again.

For now I only have 1 server with CMM and only a dozen domains, but planning to create a Cluster with a 25-30 servers and for each country a differtent domain. In my user case it's better to use a cluser of servers than using cloudflare and pay $200 for each domain. So instead to keep track of all these different logins of FPT I want the ease of use with a ssh key.

I also want to keep out other support teams that want to have access to my server with FTP to resolve a problem with their plugin or theme. I give them access with a limmeted admin WP account so that they can access only their plugin or theme, nothing else. They even change security plugins to gain FULL access to their temp. limited WP admin access. They simply rename the security plugin to .old when I give them FTP access.

If I find a BUG or whatever, I share it with them in all details or they have to reproduce it on their own server. I am willing to help, actuly I glad to help because I believe that we can get a better product afterall. I pay for it so on a update I get the correct working plugin or theme.

There were some other things I wanted to write, but due to the BSOD can't rember it.

Sorry for my gramatical errors, after the BSOD my language tool grammarly stopped working.

 

https://community.centminmod.com/threads/jailed-chrooted-sftp-ssh-user-nginx-vhost-menu.8/
Too bad, you stopped dev in 2016.

Off topic:
Well, I started in 1986 with Novel, in 1996 with suse and in 2003 with Gentoo from scratch, haha, took me a complete week on a simple notebook. Several parts took over 24 hours to compile.

I do see the need for CMM to have cluster options, so maybe I can give a helping hand in creating some stuff to get this done in little fases. As a kind of addon. Time will learn about that. But that will require at least 3 servers due to MariaDB Galeria Enterprise Clusters specs. Already created one at 18 non-geographic loctions for a multinational for their financial control and stock control on other locations. It's not my job, I have a business to run (well got paid for it, but that was just a nice side effect). Just created it and to got to know a little bit more about the ins and outs of it.