To Enable FTP for EasyEngine web sites, we need to install pure-ftpd. On Ubuntu/Debian, run
apt install -y pure-ftpd
Enable virtial FTP users
ln -s /etc/pure-ftpd/conf/PureDB /etc/pure-ftpd/auth/PureDB
touch /etc/pure-ftpd/pureftpd.pdb
In EasyEngine, we sites files are owned by www-data user, this user have a UID of 33. By default pure-ftpd won’t allow this. To enable users with UD 33 to login, run
echo 1 > /etc/pure-ftpd/conf/MinUID
Now lets create FTP user for a web site running in EasyEngine.
pure-pw useradd FTP_USER_HERE -u www-data -g www-data -d /opt/easyengine/sites/DOMAIN_NAME_HERE/app/
In above command replace
FTP_USER_HERE = FTP user for the web site, this can be any name, no space
DOMAIN_NAME_HERE = the domain name of the web site that is hosted in EasyEngine, that you need FTP access.
When you run above command, you will be asked to select password for the FTP user, this can be used to login to FTP server.
Before you can login to FTP server with newly created virtual FTP user, you need to run
pure-pw mkdb
systemctl restart pure-ftpd
Change FTP Password
If you want to change FTP user for a user, you can run
pure-pw passwd FTP_USER_HERE
pure-pw mkdb
systemctl restart pure-ftpd
Passive FTP Configuration
Many cloud hosting providers like AWS, Google Cloud, Oracle Cloud, AliCloud servers use NAT networking. That is your VM have private IP and your public IP is routed to your VM. In such case, you need to enable Passive FTP, for this run
echo "30000 50000" > /etc/pure-ftpd/conf/PassivePortRange
echo "YOUR_PUBLIC_IP" > /etc/pure-ftpd/conf/ForcePassiveIP
YOUR_PUBLIC_IP = replace this with your public IP address.
Restart pure-ftpd
systemctl restart pure-ftpd
Firewall configuration
For Passive FTP, you need to open following ports in your firewall
tcp 21
tcp 30000:50000
On Oracle Cloud server, i edited file
vi /etc/iptables/rules.v4
Find
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
Replace with
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 30000:50000 -j ACCEPT
Now restore firewall rules with
iptables-restore < /etc/iptables/rules.v4
Now FTP will work.
See EasyEngine
