I have a server which enables some users of my services to upload files using SFTP. When I talk about users, I can neither be sure who they are nor how many have access.
I have set up the access as follows:
- SFTP (SSH) access with username and password:
- Users belong to the group
sftpwhich is forced to use
- Login is sandboxed to
ChrootDirectory %hwhich is
- Login Shell is
Is there anything else I can do to secure an SFTP access for a such a range of users?
The machine runs ArchLinux. Webserver is
nginx but the files in
/srv/sftp/incoming are not served by the webserver. It's just for internal use.