From 78133f35aa5474ea0a01c5a271ca944967a7755b Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Sun, 1 Aug 2021 15:23:41 +0300
Subject: [PATCH] Update vsftpd.conf to support TLS connections

---
 install/debian/9/vsftpd/vsftpd.conf | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/install/debian/9/vsftpd/vsftpd.conf b/install/debian/9/vsftpd/vsftpd.conf
index 1ca1a9923..63aceae87 100644
--- a/install/debian/9/vsftpd/vsftpd.conf
+++ b/install/debian/9/vsftpd/vsftpd.conf
@@ -24,3 +24,16 @@ pasv_enable=YES
 pasv_max_port=12100
 pasv_min_port=12000
 use_localtime=YES
+ssl_enable=YES
+allow_anon_ssl=YES
+force_local_data_ssl=YES
+force_local_logins_ssl=YES
+ssl_tlsv1_2=YES
+ssl_sslv2=NO
+ssl_sslv3=NO
+require_ssl_reuse=YES
+ssl_ciphers=HIGH
+idle_session_timeout=600
+data_connection_timeout=120
+rsa_cert_file=/usr/local/vesta/ssl/certificate.crt
+rsa_private_key_file=/usr/local/vesta/ssl/certificate.key