cepharum/sftp repository overview

This container is used as part of our cloud service enabling users to access their individual files in the cloud using SFTP.

• This container is based on a Debian template.
• It provides OpenSSH service configured to permit SFTP access, only.
• The service is using PAM properly configured to fetch list of users from remote LDAP service.
• When a user logs in its home directory is put into chroot jail so the user can see own files, only. For security reasons user must not have write access in their own home directory but may have access limited to subfolders, only. This service is included script run on every user login creating subfolder files if missing and making sure user mustn't write to the home folder itself but to the files folder probably created before.

⁠Environment Variables

• LDAP_URI is mandatory and provides the URI of your LDAP service, e.g. ldaps://ldap.mycompany.com.
• LDAP_BASE_DN is mandatory, too, providing the Base-DN to limit users granted access, e.g. ou=people,dc=mycompany,dc=com.
• LDAP_BIND_DN and LDAP_BIND_PW are optionally enabling LDAP Binding prior to fetching list of users or authenticating single user.