1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/restic_ynh.git synced 2024-09-03 20:16:22 +02:00

Update POST_INSTALL.md

This commit is contained in:
Alexandre Aubin 2024-07-10 20:43:40 +02:00 committed by GitHub
parent 968e3212ee
commit 23e05c4b53
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -13,3 +13,17 @@ echo "__PUBLIC_KEY__" >> ~/.ssh/authorized_keys
```
Also make sure `__BACKUP_PATH__` exists and is writable by `__SSH_USER__`
Optional: to improve security, make sure the user can only connect through SFTP and can only access its home directory on the target server.
On Debian/Ubuntu, this is done using the following command snippet:
```
cat << EOF>> /etc/ssh/sshd_config
Match User __SSH_USER__
ChrootDirectory %h
ForceCommand internal-sftp
AllowTcpForwarding no
X11Forwarding no
EOF
systemctl restart ssh
```