SSH access to only httpdocs folder
Really need to have an user access via ssh to only httpdocs folder not root.
It is necessary for example to grant time-limit access for spesific user.
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
— AY
-
Philip Wee commented
Hi, this was created way back in 2018 but it has not been implemented yet. Could you please kindly look into this feature? It will really help in terms of security...
-
Marc commented
Yes, think also it's an essential requirement.
Notice that you can implement that by editing the ssh_config:
1) create an FTP account (eg. myftpuser) for your domain with /httpdocs/ for home directory
2) edit /etc/ssh/sshd_config (replace the Subssytem line) :
# Subsystem sftp /usr/lib/openssh/sftp-server -f AUTH -l INFO
Subsystem sftp internal-sftp -f AUTH -l INFO3) Create /etc/ssh/sshd_config.d/sftp.conf with the following content :
Match User myftpuser
ChrootDirectory /var/www/vhosts/{domain}/httpdocs
ForceCommand internal-sftp
AllowTcpForwarding no
X11Forwarding no
4) Notice that ChrootDirectory must be owned by root for this to work:
chown root:psaserv /var/www/vhosts/{domain}/httpdocs
chmod 755 /var/www/vhosts/{domain}/httpdocsHope this helps
-
Stormtight Covers commented
yes
-
Marco commented
Yes! Not sure how this isn't a standard security measure on shared hosted services?? My customers literally have access all the entire root /. We have forced SFTP (disabled insecure FTP), and the same applies since it's using Plesk OpenSSH.
This is not a feature request, it's absolutely essential requirement. Please fix this! I am paying Plesk a monthly subscription and this is unacceptable.
-
Jim McDermott commented
I'm surprised this isn't implemented yet. For those of us hosting multiple Laravel sites with different dev groups, it's necessary.
-
Gabriel Genoni commented
Yes, it's really too important. Thanks
-
Marco commented
Very important feature.
-
A. Great commented
It is extremely important to add the functionality of providing SSH access to third-party users for a particular folder, like /var/www/vhosts/example.com/httpdocs/ or /var/www/vhosts/example.com/httpdocs/dir1
Reason #1: FTP is insecure
Reason #2: FTP nor FTPs is supported by the Cloudflare proxy
Reason #3: For security reasons, third-party developers do not need root access (Plesk's current configuration). Highly productive teams need to delegate tasks to DevOps for specific directories and admins are subjected to data leakage when bypassing Cloudflare to connect via FTP in these highly productive environments.
Reason: #4: Connecting a web app located in a specific directory to a third-party API using SSH via Plesk is unavailable.Ideal Solutions:
Solution #1: Cloudflare enables a solution to proxy FTPs. or
Solution #2: Plesk implements a solution for directory-specific SSH like FTPs.Non-ideal solutions:
Non-ideal Solution #1: Advise customers to stop using Cloudflare or configure their DNS to bypass it for FTP. (This exposes their origin IP)
Non-ideal Solution #2: Create multiple subscriptions for customers.
Non-ideal Solution #3: Customers consider migrating their site to the sole use of GCP or AWS by dividing the site into individual projects. Configuring SSH connectivity for individual projects via Cloud platforms is very simple and easy and customers can continue using Cloudflare. This is a growing trend. Hopefully, Plesk can provide a solution to combat this loss of customers.Despite my extensive research, I may be overlooking a current solution. If so, please provide the resource.
-
amedeo commented
Needed to use SFTP instead of FTP
-
Carlos commented
Or ability to provide SSH access to some another folder inside "/var/www/vhosts/example.com/httpdocs
and ability to create groups for differents folders to work in a company
-
Anonymous commented
+1
-
Anonymous commented
+1 ASAP
-
Anonymous commented
+1
-
Anonymous commented
Or ability to provide SSH access to some another folder inside "/var/www/vhosts/example.com/httpdocs "
-
Anonymous commented
Really necessary function!!!
-
Anonymous commented
+1
-
Anonymous commented
Very useful function. Please make it asap.