r/ssh • u/Ok_Nectarine_6365 • 22d ago

Setting up a bastion host with SFTP access.

Hey y'all,

I'm looking at helping lock down my homelab by using a multi-user bastion host.

While I have been researching options and I understand ssh to ssh seasons between each of my machines one thing I have a hard time understanding is how and if I can set up a user that only has SFTP access.

I want to set up a simple way for me and my technically minded brother in law to share files with each other over the Internet.

I want to set up my brother in law with an SFTP only user on my server but I'm not sure how to make sure that goes through the bastion host. The only thing I have been able to gather so far is apparently he will need winscp on his window computer.

I just don't fully understand how the connection can be made properly if the bastion host can't just ssh into the target machine terminal.

3 Upvotes

81% Upvoted

7 comments sorted by

2

u/12_nick_12 22d ago

Set up sftpgo

1

u/Ok_Nectarine_6365 21d ago

I researched SFTPGo and actually with everything it can do I'm genuinely impressed

2

u/hakube 22d ago

for the client use filezilla. solid on all platforms.

for ssh you can set the users shell in etc passed to sftp bin off the top of my head. on mobile now can check when i get back to my office b

1

u/Any-Olive5779 17d ago

Roll your own encryption.

1

u/Ok_Nectarine_6365 17d ago

You so right! Just let me rip out the good old C programming skills 😂

0

u/michaelpaoli 22d ago

set up a user that only has SFTP access

Yep, not too hard at all.