### daemon ###

background=NO
listen_ipv6=NO
listen=YES

pasv_enable=YES
pasv_min_port=40200
pasv_max_port=40300

max_clients=100
banner_file=/etc/vsftpd.banner

### virtual user ###
# maybe later


### system users ###

local_enable=YES
pam_service_name=pam

chroot_local_user=YES
local_root=/var/ftp/

write_enable=YES
local_umask=022

### Anonymous only for read ###

# If you don't want use anonymous users
# comment this block

chroot_local_user=YES
anonymous_enable=YES
allow_anon_ssl=YES
no_anon_password=YES
anon_root=/var/ftp/
anon_upload_enable=NO
anon_mkdir_write_enable=NO
# remove and rename on ftp-server
anon_other_write_enable=NO
# hide owner, show ftp:ftp
hide_ids=YES

###   SSL   ###

ssl_enable=YES
rsa_cert_file=/etc/ssl/certs/ftp.pem
rsa_private_key_file=/etc/ssl/private/ftp.key
ssl_ciphers=HIGH

###   log   ###

dual_log_enable=YES
log_ftp_protocol=YES
xferlog_enable=YES

###   500 OOPS: child died   ###
seccomp_sandbox=NO