Service vsftpd

systems/LoutreOS/services.nix

@@ -259,6 +259,20 @@ in
     database.password = "gitea";
   };
 
+  services.vsftpd = {
+    enable = true;
+    forceLocalLoginsSSL = true;
+    forceLocalDataSSL = true;
+    userlistDeny = false;
+    localUsers = true;
+    userlist = ["claire"];
+    rsaCertFile = "/var/vsftpd/vsftpd.pem";
+    extraConfig = ''
+      pasv_min_port=64000
+      pasv_max_port=65535
+    '';
+  };
+
   services.site-musique.enable = true;
   services.site-musique.port = musique_port;
   services.site-musique.domaine = "musique-meyenheim.fr";
@@ -272,6 +286,10 @@ in
     3483 9000 9090 # Slimserver
     51413 # Transmission
     8448 # Matrix federation
+    20 21 # FTP
+  ];
+  networking.firewall.allowedTCPPortRanges = [
+    { from = 64000; to = 65535; } # FTP
   ];
   networking.firewall.allowedUDPPorts = [
     111 2049 4000 4001 4002 # NFS