config = lib.mkIf config.services.pure-ftpd.enable {
security.acme.certs."ftp" = config.services.myCertificates.certConfig // {
domain = "eldiron.immae.eu";
- };
-
- nixpkgs.config.packageOverrides = oldpkgs: rec {
- pure-ftpd = pkgs.callPackage ./pure-ftpd.nix {};
+ postRun = ''
+ systemctl restart pure-ftpd.service
+ '';
+ extraDomains = { "ftp.immae.eu" = null; };
};
networking = {
users.users = [
{
name = "ftp";
- uid = config.ids.uids.ftp;
+ uid = config.ids.uids.ftp; # 8
group = "ftp";
description = "Anonymous FTP user";
home = "/homeless-shelter";
+ extraGroups = [ "keys" ];
}
];
install -m 0755 -o ftp -g ftp -d /var/lib/ftp
'';
- systemd.services.pure-ftpd = let
- ldapConfigFile = pkgs.writeText "pure-ftpd-ldap.conf" ''
+ mySecrets.keys = [{
+ dest = "pure-ftpd-ldap";
+ permissions = "0400";
+ user = "ftp";
+ group = "ftp";
+ text = ''
LDAPServer ${myconfig.env.ftp.ldap.host}
LDAPPort 389
LDAPUseTLS True
LDAPAuthMethod BIND
- # Pas de possibilité de donner l'Uid/Gid !
- # Compilé dans pure-ftpd directement avec immaeFtpUid / immaeFtpGid
+ # Pas de possibilite de donner l'Uid/Gid !
+ # Compile dans pure-ftpd directement avec immaeFtpUid / immaeFtpGid
LDAPHomeDir immaeFtpDirectory
'';
+ }];
+
+ systemd.services.pure-ftpd = let
configFile = pkgs.writeText "pure-ftpd.conf" ''
PassivePortRange 40000 50000
ChrootEveryone yes
SyslogFacility ftp
DontResolve yes
MaxIdleTime 15
- LDAPConfigFile ${ldapConfigFile}
+ LDAPConfigFile /var/secrets/pure-ftpd-ldap
LimitRecursion 10000 8
AnonymousCanCreateDirs no
MaxLoad 4