# DO NOT EDIT!
AllowOverwrite on
AuthAliasOnly on

# User Aliases
UserAlias sambauserftp sambauser
UserAlias dlaul wwwdownload

# START OF GENERAL SETTINGS!
ServerName			"Linux FTP Server"
ServerType 			standalone
DeferWelcome			on
MultilineRFC2228 on
DefaultServer			on
ShowSymlinks			off
TimeoutNoTransfer 300
TimeoutStalled 60
TimeoutIdle 300
DisplayFirstChdir               .message
ListOptions                	"-l"
RequireValidShell 		off
TimeoutLogin 20
RootLogin 			off
# END OF GENERAL SETTINGS!

# START OF LOGS! DO NOT EDIT!
ExtendedLog 			/var/log/ftp.log
TransferLog 			/var/log/xferlog
SystemLog			/var/log/syslog.log
# END OF LOGS!

# START USER SETTINGS!
UseFtpUsers on
AllowStoreRestart on
Port 9000
PassivePorts 9001 9001
MaxInstances 10
MaxLoginAttempts 2
PersistentPasswd off
User	 nobody
Group	 nogroup
Umask	022	022
MaxClients 2
MaxClientsPerHost 2
MaxClientsPerUser 1
MaxHostsPerUser 1
#END USER SETTINGS!

# START OF MESSAGES!
AccessGrantMsg "Welcome!"
ServerIdent on "IP in cache"
#END OF MESSAGES!

# START OF ROOT DIRECTORIES!
DefaultRoot /media/samba
# DefaultRoot /media/samba/crash # HOW?
#END OF ROOT DIRECTORIES!

# CONTAINS USERS TO THEIR HOME DIRECTORY! DO NOT EDIT!
DefaultRoot ~

# START OF VALID USERNAMES!
<Limit LOGIN>
AllowUser sambauser
AllowUser wwwdownload
DenyALL
</Limit>
# END OF VALID USERNAMES!

# START OF DIRECTORY PERMISSIONS!

# Permissions for '/media/samba'
<Directory /media/samba/>
Umask 022 022
AllowOverwrite off
	<Limit ALL>
		Deny ALL
	</Limit>
# This allows 'sambauser' to do anything in '/media/samba'.
	<Limit READ WRITE DIRS PORT PASV>
		AllowUser sambauser
	</Limit>
# This only allows 'wwwdownload' to download from '/media/samba'.
	<Limit READ DIRS PORT PASV>
		AllowUser wwwdownload
	</Limit>
</Directory>

#Permissions for '/media/samba/uploads'.
<Directory /media/samba/Uploads>
Umask 022 022
AllowOverwrite off
	<Limit ALL>
		Deny ALL
	</Limit>
# This allows 'wwwdownload' to upload to '/media/samba/uploads'.
	<Limit STOR MKD DIRS PORT PASV>
		AllowUser wwwdownload
	</Limit>
</Directory>

# END OF DIRECTORY PERMISSIONS!

# START OF TLS ENCRYPTION SETTINGS! Do NOT EDIT!
<IfModule mod_tls.c>
    TLSEngine on
    TLSLog /var/ftpd/tls.log
    TLSProtocol TLSv1
    TLSRequired on
    TLSVerifyClient off
# Locations Of Keys.
    TLSRSACertificateFile /etc/ftpcert/server.crt
    TLSRSACertificateKeyFile /etc/ftpcert/server.key
    TLSCACertificateFile /etc/ftpcert/ca.crt
</IfModule>
# END OF TLS ENCRYPTION SETTINGS!