beenull/sftpgo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
sftpgo/sftpgo.json

76 lines
1.6 KiB
JSON
Raw Normal View History

first version
2019-07-20 10:26:52 +00:00
{
Support multiple private (host) keys With this patch, one can configure one or more private (host) keys in the configuration file. I made it a nested struct, so we can add more options later. Eg. host certificates might be a useful addition if I can figure out how this is done in golang's crypto/ssh... Signed-off-by: Jo Vandeginste <Jo.Vandeginste@kuleuven.be>
2019-08-01 07:42:15 +00:00
"sftpd": {
"bind_port": 2022,
"bind_address": "",
"idle_timeout": 15,
"max_auth_tries": 0,
"umask": "0022",
add version to the default server banner
2019-09-12 07:21:58 +00:00
"banner": "",
add support for atomic upload Atomic uploads are now configurable. The default upload mode remains non atomic
2019-08-04 07:37:58 +00:00
"upload_mode": 0,
Support multiple private (host) keys With this patch, one can configure one or more private (host) keys in the configuration file. I made it a nested struct, so we can add more options later. Eg. host certificates might be a useful addition if I can figure out how this is done in golang's crypto/ssh... Signed-off-by: Jo Vandeginste <Jo.Vandeginste@kuleuven.be>
2019-08-01 07:42:15 +00:00
"actions": {
"execute_on": [],
"command": "",
"http_notification_url": ""
Improve documentation
2019-08-01 13:39:30 +00:00
},
add SCP support SCP is an experimental feature, we have our own SCP implementation since we can't rely on scp system command to proper handle permissions, quota and user's home dir restrictions. The SCP protocol is quite simple but there is no official docs about it, so we need more testing and feedbacks before enabling it by default. We may not handle some borderline cases or have sneaky bugs. This commit contains some breaking changes to the REST API. SFTPGo API should be stable now and I hope no more breaking changes before the first stable release.
2019-08-24 12:41:15 +00:00
"keys": [],
sftpd: add configuration options for allowed ciphers, MACs and KEX algorithms add support for login banner too Fixes #32
2019-09-03 10:08:09 +00:00
"kex_algorithms": [],
"ciphers": [],
"macs": [],
sftpd: add support for SSH user certificate authentication This add support for PROTOCOL.certkeys vendor extension: https://cvsweb.openbsd.org/src/usr.bin/ssh/PROTOCOL.certkeys?rev=1.8 Fixes #117 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2020-05-15 18:08:53 +00:00
"trusted_user_ca_keys":[],
sftpd: add support for chmod/chown added matching permissions too and a new setting "setstat_mode". Setting setstat_mode to 1 you can keep the previous behaviour that silently ignore setstat requests
2019-11-15 11:15:07 +00:00
"login_banner_file": "",
sftpd: add support for some SSH commands md5sum, sha1sum are used by rclone. cd, pwd improve the support for RemoteFiles mobile app. These commands are all implemented inside SFTPGo so they work even if the matching system commands are not available, for example on Windows
2019-11-18 22:30:37 +00:00
"setstat_mode": 0,
Refactor docs
2020-03-04 22:10:58 +00:00
"enabled_ssh_commands": [
"md5sum",
"sha1sum",
"cd",
enable scp in default configuration remove the deprecated enable_scp setting
2020-03-26 22:38:24 +00:00
"pwd",
"scp"
Refactor docs
2020-03-04 22:10:58 +00:00
],
Support for HAProxy PROXY protocol you can proxy and/or load balance the SFTP/SCP service without losing the information about the client's address.
2020-02-27 08:21:30 +00:00
"keyboard_interactive_auth_program": "",
add HTTP hooks external auth, pre-login user modification and keyboard interactive authentication is now supported via HTTP requests too
2020-04-01 21:25:23 +00:00
"keyboard_interactive_auth_hook": "",
proxy protocol: add list of allowed IP addresses and IP ranges "proxy_allowed" setting allows to specify the allowed IP address and IP ranges that can send the proxy header. This setting combined with "proxy_protocol" allows to ignore the header or to reject connections that send the proxy header from a non listed IP
2020-03-01 22:12:28 +00:00
"proxy_protocol": 0,
"proxy_allowed": []
Support multiple private (host) keys With this patch, one can configure one or more private (host) keys in the configuration file. I made it a nested struct, so we can add more options later. Eg. host certificates might be a useful addition if I can figure out how this is done in golang's crypto/ssh... Signed-off-by: Jo Vandeginste <Jo.Vandeginste@kuleuven.be>
2019-08-01 07:42:15 +00:00
},
"data_provider": {
"driver": "sqlite",
"name": "sftpgo.db",
"host": "",
"port": 5432,
"username": "",
"password": "",
"sslmode": 0,
"connection_string": "",
"users_table": "users",
"manage_users": 1,
dataprovider: remove transaction for quota update The update is atomic so no transaction is needed. Addionally a transaction will ask for a new connection to the pool and this can deadlock if the pool has a max connection limit too low. Also make configurable the pool size instead of hard code to the cpu number. Fixes #47
2019-09-13 06:14:07 +00:00
"track_quota": 2,
add support for users' default base dir
2019-09-28 20:48:52 +00:00
"pool_size": 0,
dataprovider: add custom command and/or HTTP notifications on users add, update and delete This way custom logic can be implemented for example to create a UNIX user as asked in #58
2019-11-14 10:06:03 +00:00
"users_base_dir": "",
"actions": {
"execute_on": [],
"command": "",
"http_notification_url": ""
add support for authentication using external programs Fixes #62
2020-01-06 20:42:41 +00:00
},
"external_auth_program": "",
add HTTP hooks external auth, pre-login user modification and keyboard interactive authentication is now supported via HTTP requests too
2020-04-01 21:25:23 +00:00
"external_auth_hook": "",
add support for serving Google Cloud Storage over SFTP/SCP Each user can be mapped with a Google Cloud Storage bucket or a bucket virtual folder
2020-01-31 18:04:00 +00:00
"external_auth_scope": 0,
add support for dynamic users modifications A custom program can be executed before the users login to modify the configurations for the user trying to login. You can, for example, allow login based on time range. Fixes #77
2020-02-23 17:50:59 +00:00
"credentials_path": "credentials",
add HTTP hooks external auth, pre-login user modification and keyboard interactive authentication is now supported via HTTP requests too
2020-04-01 21:25:23 +00:00
"pre_login_hook": "",
Rename before_login_program to pre_login_program and some documentation update
2020-02-25 15:07:38 +00:00
"pre_login_program": ""
Support multiple private (host) keys With this patch, one can configure one or more private (host) keys in the configuration file. I made it a nested struct, so we can add more options later. Eg. host certificates might be a useful addition if I can figure out how this is done in golang's crypto/ssh... Signed-off-by: Jo Vandeginste <Jo.Vandeginste@kuleuven.be>
2019-08-01 07:42:15 +00:00
},
"httpd": {
"bind_port": 8080,
add a basic web interface The builtin web interface allows to manage users and connections
2019-10-07 16:19:01 +00:00
"bind_address": "127.0.0.1",
"templates_path": "templates",
add backup/restore REST API
2019-12-27 22:12:44 +00:00
"static_files_path": "static",
httpd: add support for basic auth and HTTPS
2020-02-03 23:08:00 +00:00
"backups_path": "backups",
"auth_user_file": "",
"certificate_file": "",
"certificate_key_file": ""
add a new configuration section for HTTP clients HTTP clients are used for executing hooks such as the ones used for custom actions, external authentication and pre-login user modifications. This allows, for example, to use self-signed certificate without defeating the purpose of using TLS
2020-04-26 21:29:09 +00:00
},
"http": {
"timeout": 20,
httpclient: add a configuration parameter to skip TLS certificate validation In this mode, TLS is susceptible to man-in-the-middle attacks. This should be used only for testing.
2020-05-03 09:37:50 +00:00
"ca_certificates": [],
"skip_tls_verify": false
Support multiple private (host) keys With this patch, one can configure one or more private (host) keys in the configuration file. I made it a nested struct, so we can add more options later. Eg. host certificates might be a useful addition if I can figure out how this is done in golang's crypto/ssh... Signed-off-by: Jo Vandeginste <Jo.Vandeginste@kuleuven.be>
2019-08-01 07:42:15 +00:00
}
first version
2019-07-20 10:26:52 +00:00
}
Reference in a new issue Copy permalink