On Tue, 26 Mar 2024 10:28:11 +0100 Sylvain Saboua <sylvain.sab...@free.fr> wrote: > Match User media > ForceCommand internal-sftp -d /home/media > ChrootDirectory /home/media > PasswordAuthentication yes > AuthenticationMethods none > PermitEmptyPasswords yes
you probably also want DisableForwarding there. otherwise everyone can use your machine as a proxy. this happened to me with a similar setup to allow anonymous git cloning. some spammer figured it out and used my server as a relay. don't be me ... ;)
