ma anon-sftp: init

2 files changed, 25 insertions, 0 deletions

diff --git a/2configs/ham/light/groups.nix b/2configs/ham/light/schlafzimmer.nix
index 274fd60a3..274fd60a3 100644
--- a/2configs/ham/light/groups.nix
+++ b/2configs/ham/light/schlafzimmer.nix
diff --git a/2configs/share/anon-sftp.nix b/2configs/share/anon-sftp.nix
new file mode 100644
index 000000000..7cde9317a
--- /dev/null
+++ b/2configs/share/anon-sftp.nix
@@ -0,0 +1,25 @@
+{ config, lib, pkgs, ... }:
+
+with import <stockholm/lib>;
+{
+  services.openssh = {
+    allowSFTP = true;
+    sftpFlags = [ "-l VERBOSE" ];
+    extraConfig = ''
+      Match User anonymous
+        ForceCommand internal-sftp
+        AllowTcpForwarding no
+        X11Forwarding no
+        PasswordAuthentication no
+    '';
+  };
+
+  users.users.anonymous = {
+    uid = genid "anonymous";
+    useDefaultShell = false;
+    password = "anonymous";
+    home = "/media/anon";
+    createHome = true;
+  };
+
+}