ServerName			"FTP server"
ServerType			standalone
DefaultServer			on
Port				21
Umask				022
DefaultTransferMode binary

MaxInstances			30

User				nobody
Group				nobody

IdentLookups		off

AuthOrder mod_auth_file.c mod_auth_pam.c* mod_auth_unix.c
AuthUserFile "/etc/proftpd/proftpd.passwd"
AuthGroupFile "/etc/proftpd/proftpd.group"

DefaultRoot ~

DebugLevel 9
SystemLog "/var/log/proftpd/proftpd.log"

DelayEngine off

AllowOverwrite		on

<Limit SITE_CHMOD>
  DenyAll
</Limit>

<IfModule mod_tls.c>
    TLSEngine on
    TLSLog /var/log/proftpd/tls.log
    TLSProtocol TLSv1
    TLSOptions AllowPerUser

    # Are clients required to use FTP over TLS when talking to this server?
    TLSRequired on

    # Server's certificate
    TLSRSACertificateFile /etc/proftpd/server.cert.pem
    TLSRSACertificateKeyFile /etc/proftpd/server.key.pem

    # CA the server trusts
#    TLSCACertificateFile /etc/ftpd/root.cert.pem

    # Authenticate clients that want to use FTP over TLS?
    TLSVerifyClient on

    # Allow SSL/TLS renegotiations when the client requests them, but
    # do not force the renegotations.  Some clients do not support
    # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
    # clients will close the data connection, or there will be a timeout
    # on an idle data connection.
#    TLSRenegotiate required off
    TLSRenegotiate none

<Anonymous ~ftp>
  User				ftp
  Group				ftp

  AnonRequirePassword off
  UserAlias			anonymous ftp

  MaxClients			10

  DisplayLogin			welcome.msg
  DisplayFirstChdir		.message

  TLSRequired off

#  <Limit WRITE>
#    DenyAll
#  </Limit>
</Anonymous>


</IfModule>