# SFTP-Users

Sometimes "legacy" interfaces like Solfusion require access to a folder that can be accessed by SFTP from outside the server. Since Solfusion does not make use of Symfony Flysystem, this must be configured manually. In any event, SSH should be configured to prohibit password login!

Create a user \<sftp-user> and assign it to same group as the webserver.

Create a directory for use by sftp, e.g. /var/sftp. Note this must be owned by root!

<pre class="language-editorconfig"><code class="lang-editorconfig"># /etc/ssh/sshd_config
...
Subsystem       sftp    /usr/lib/openssh/sftp-server<a data-footnote-ref href="#user-content-fn-1"> -u 002</a>
...
# sftp
Match User <a data-footnote-ref href="#user-content-fn-2">&#x3C;sftp-user></a>
        ForceCommand internal-sftp
        PasswordAuthentication no
        ChrootDirectory /var/sftp
        PermitTunnel no
        AllowAgentForwarding no
        AllowTcpForwarding no
        X11Forwarding no

</code></pre>

[^1]: This important to force setting the group permissions during sftp upload

[^2]: Replace with the name of your sftp user


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://notebook.vanwittlaer.de/hosting/sftp-users.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
