Pure-FTPd

This is an Ansible Role to install Pure-FTPd on Debian/Ubuntu systems.

Requirements

You only need specific requirements if you intend to enable TLS and need to create a certificate.

• If you set pureftpd_tls_certificate_method to generate, you must install openssl on the server.
• If you set pureftpd_tls_certificate_method to certbot, certbot should be installed on the remote server. You can use geerlingguy.certbot to install it.

Role Variables

Here are the available variables with their default values (see defaults/main.yml):

• pureftpd_packages: List of packages to be installed via APT.

  • pure-ftpd-common
  • pure-ftpd

• pureftpd_global_config_mode: Set to standalone.

• pureftpd_global_config_virtualchroot: Set to true.

• pureftpd_global_config_uploadscript: Default is empty.

• pureftpd_global_config_uploaduid: Default is empty.

• pureftpd_global_config_uploadgid: Default is empty.

These properties configure Pure-FTPd globally and generate the file /etc/default/pure-ftpd-common. For details, see templates/pure-ftpd-common.j2.

• pureftpd_fortune: Message displayed when users log in (default is empty).

MySQL Configuration

• pureftpd_mysql: Configuration required to store virtual users in a MySQL database. More information is available in the Pure-FTPd documentation.

PostgreSQL Configuration

• pureftpd_postgresql: Configuration needed for using a PostgreSQL database for virtual users. More information is available in the Pure-FTPd documentation.

LDAP Configuration

• pureftpd_ldap: Configure LDAP server settings for virtual users. More information is available in the Pure-FTPd documentation.

General Configuration Options

• pureftpd_config: A collection of settings for Pure-FTPd. More information is available in the Pure-FTPd documentation.

TLS Options

The TLS option can have values from 0 to 3 as follows:

• 0: SSL/TLS support is disabled.
• 1: Clients can connect in either traditional way or via SSL/TLS.
• 2: Only SSL/TLS connections are accepted.
• 3: Only SSL/TLS clients and no clear data connections are allowed.

Further details can be found in the Pure-FTPd documentation.

User Management

• pureftpd_system_users: List of system users to add. Passwords must be encrypted.
• pureftpd_system_deleted_users: List of system users to remove.
• pureftpd_virtual_users: List of virtual users to create with PureDB as the storage method. Fields name, password, and homedir are required.
• pureftpd_tls_certificate_method: Choose how to manage TLS certificates (options: certbot, generate, or upload).

Example Playbook

- hosts: webservers
  roles:
    - apham0001.pure-ftpd

License

GPLv2

Author Information

This role was created in 2017 by gcoop Cooperativa de Software Libre.