Chapter 18. Setting up domain based multi-user FTP/FTPS Access

Before you start this chapter

  1. Connect to your server over SFTP using FileZilla (see Chapter 3, Connecting to your server with FileZilla and SFTP).
  2. Set up a website (see Chapter 4, Website setup).

This section describes how to set up distinct per-domain FTP/FTPS users. Where with the old setup you may have logged in with a user like:

my-brilliant-site.com

With this method you can have many users, of the form:

bob@my-brilliant-site.com
alice@my-brilliant-site.com
charlie@my-brilliant-site.com

Users can be limited to specific directories, and quotas imposed on each, so bob@my-brilliant-site.com may be limited to eg, htdocs, which works out as /srv/my-brilliant-site.com/public/htdocs. These domain-based users do not have SSH/SFTP access.

Each user is defined using four fields, added to /srv/my-brilliant-site.com/config/ftp-users:

username
password
directory (limited to directories in /srv/my-brilliant-site.com/public)
quota

Configuration for giving bob access and a quota of 10 megabytes will look like so:

bob:your-password-here:htdocs:10M

This can be done for any number of users - all are specified in the same ftp-users file.

Warning

Please be aware that despite being limited to the public/ directory when logging in over FTP/FTPS, it is trivial for the user to read files elsewhere on the filesystem, for example by using specially written PHP scripts. It is advisable to grant access only to trusted people.

Note

Please be aware that the FTP quota will include all log data from the web-server in public/logs/, as well as the automatically generated statistics in public/htdocs/stats/.

In addition