OPDS config_local.php

[huber70]

@mariosipad

ups, yes it works

[mariosipad]

@huber70

And this is what you wanted?

[huber70]

@mariosipad

well, I have now (have not tried it out outside our home) access from "everywhere" to my folders on tablet/pc/smartphone

what is now the access ip to a specific folder for a friend to download eg files/folder or to view pics in a specific folder?

[mariosipad]

@huber70

Ahhh! You have found the problem with running your own (s)ftp server.

Also how to block root access if you use root. (only from external, but not from internal).

If you only have a few users with all about the same access it can be done.
But, more users and more different places on your pi they may access. It's no longer fun!

[mariosipad]

@huber70

Please read this website https://tecadmin.net/how-to-create-s...-in-debian-11/

and check it this might help you.

for "sftpuser" read your user(s). so for example sftp1user, sftp2user, etc


This works for the OS on the Raspberry Pi (RaspiOS).

[huber70]

@mariosipad

well, I guess about 5-6 friends, access can be the same, but the folder/files will of course be different. It's mainly to give access to a specific (different) picture folder with its content and a specific (different) folder with mp3 content

[mariosipad]

@huber70

so they all may access (for example):

/home/sftp/music and /home/sftp/pictures

or

user sftp1 -> /home/sftp1/music and /home/sftp1/pictures
user sftp2 -> /home/sftp2/music and /home/sftp2/pictures
user sftp3 -> /home/sftp3/music and /home/sftp3/pictures
user sftp3 -> /home/sftp2/music and /home/sftp2/pictures

or

user sftp1 -> /home/sftp1/music and /home/sftp1/pictures
user sftp2 -> /home/sftp1/music and /home/sftp2/pictures
user sftp3 -> /home/sftp3/music and /home/sftp3/pictures
user sftp3 -> /home/sftp2/music and /home/sftp3/pictures

or even more complicated?

[huber70]

@mariosipad

no, looks good so far - music and/or pictures

[mariosipad]

@huber70

so only /home/sftp/music and /home/sftp/pictures for all to access?

but with different users?

[huber70]

@mariosipad

yes

[mariosipad]

@huber70

I think I have something that I can call "workable".

I must write down what I did to make it work in such a way that it is clear to you. It's not difficult, but communication is the most difficult thing.

I like to be clearheaded before I will start it (tomorrow). I had some lock-ups testing I would like you to go without. (simply solved, but still....)

OK?

In the meantime any other questions?

[huber70]

@mariosipad

No, I'm waiting full of joy

[mariosipad]

@huber70

I have a problem with internet.

The ISP is working on it (they say).

Patience for me (and you) as posting much text from an iPhone doesn’t really work.

[huber70]

@mariosipad

don't worry, get happy (afterwards)

[mariosipad]

@huber70

See if this helps you. Change usernames sftp, sftp1, sftp2 to what you want and add users if you want to.

==============================================================
adduser
==============================================================

sudo adduser --shell /bin/false --no-create-home sftp
sudo adduser --shell /bin/false --no-create-home sftp1
sudo adduser --shell /bin/false --no-create-home sftp2

sudo groupadd sftpusers

sudo usermod -a -G sftpusers sftp
sudo usermod -a -G sftpusers sftp1
sudo usermod -a -G sftpusers sftp2

sudo usermod -g sftpusers sftp
sudo usermod -g sftpusers sftp1
sudo usermod -g sftpusers sftp2


==============================================================
Make sftp-jail
==============================================================

sudo mkdir -p /home/sftp/music
sudo mkdir -p /home/sftp/pictures

sudo chown sftp:sftpusers -R /home/sftp/music
sudo chown sftp:sftpusers -R /home/sftp/pictures

==============================================================
append to /etc/ssh/sshd_config
==============================================================

Protocol 2

Match Group sftpusers
        ForceCommand internal-sftp
        PasswordAuthentication yes
        ChrootDirectory /home/sftp
        PermitTunnel no
        AllowAgentForwarding no
        AllowTcpForwarding no
        X11Forwarding no

==============================================================
restart ssh
==============================================================

sudo systemctl restart ssh

==============================================================

==============================================================

and try it out!