This commit is contained in:
Matthos Denys 2021-03-06 16:19:01 +03:00
parent 20a4f4dc56
commit e97d9d4c3e
3 changed files with 22 additions and 29 deletions

View File

@ -1,17 +1,11 @@
FROM alpine:3.12.3 FROM alpine:3.12.3
RUN apk update RUN apk update && apk add vsftpd openssl
RUN apk add vsftpd openssl RUN openssl req -x509 -nodes -days 365 -newkey rsa:2048 -subj "/C=RU/ST=ru/L=Russia/O=21_schoo/CN=mdenys_services" -keyout /etc/ssl/private/vsftpd.key -out /etc/ssl/certs/vsftpd.crt
RUN echo "root:root" | chpasswd
RUN echo "mdenys:mdenys" | chpasswd
RUN mkdir -p /var/ftp
RUN adduser -D -h /var/ftp mdenys
RUN openssl req -x509 -nodes -days 365 \
-newkey rsa:2048 -subj \
"/C=RU/ST=ru/L=Russia/O=21_schoo/CN=mdenys_services" \
-keyout /etc/ssl/private/vsftpd.key \
-out /etc/ssl/certs/vsftpd.crt
COPY vsftpd.conf /etc/vsftpd/ COPY vsftpd.conf /etc/vsftpd/
COPY start.sh . COPY start.sh .
RUN chmod +x start.sh RUN chmod +x start.sh
RUN adduser -D user
RUN echo "user:user" | chpasswd
RUN chown user:user /home/user
EXPOSE 20 21 21000 EXPOSE 20 21 21000
CMD sh start.sh CMD sh start.sh

View File

@ -1,27 +1,26 @@
anonymous_enable=YES anonymous_enable=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
listen=YES
seccomp_sandbox=NO
local_enable=YES local_enable=YES
write_enable=YES write_enable=YES
local_umask=022 local_umask=022
chroot_local_user=NO listen=YES
chroot_list_enable=YES dirmessage_enable=YES
chroot_list_file=/etc/vsftpd/chroot.list xferlog_enable=YES
pam_service_name=vsftpd
pasv_enable=YES
pasv_min_port=21000
pasv_max_port=21000
port_enable=YES
allow_writeable_chroot=YES allow_writeable_chroot=YES
seccomp_sandbox=NO
ssl_enable=YES ssl_enable=YES
rsa_cert_file=/etc/ssl/certs/vsftpd.crt
rsa_private_key_file=/etc/ssl/private/vsftpd.key
allow_anon_ssl=NO allow_anon_ssl=NO
force_local_data_ssl=YES force_local_data_ssl=YES
force_local_logins_ssl=YES force_local_logins_ssl=YES
require_ssl_reuse=NO
ssl_tlsv1=YES ssl_tlsv1=YES
ssl_sslv2=NO ssl_sslv2=NO
ssl_sslv3=NO ssl_sslv3=NO
rsa_cert_file=/etc/ssl/certs/vsftpd.crt pasv_address=192.168.99.120
rsa_private_key_file=/etc/ssl/private/vsftpd.key chroot_local_user=YES
pasv_enable=YES background=NO
pasv_min_port=30000
pasv_max_port=30000
pasv_address=$__CLUSTER_EXTERNAL_IP__

View File

@ -9,4 +9,4 @@ data:
- name: default - name: default
protocol: layer2 protocol: layer2
addresses: addresses:
- 192.168.99.165-192.168.99.200 - 192.168.99.120-192.168.99.200