Skip to main content
Enterprise Annual License: pay for 10 months, get 12.Claim the free months
HiTechCloudPanelDocumentation
Version: 4.1

Setup TLS for FTP

This guide explains how to enable Explicit FTP over TLS (FTPS) in HiTechCloud using VSFTPD.

Services on the host (4.0.4 and later)

When the services run on the host, FTP is served by pure-ftpd and FTPS needs no manual setup: once the server has a TLS certificate for its hostname, pure-ftpd is configured with it and requires explicit TLS - plain FTP logins are refused. If the certificate was issued after FTP was installed, apply it with hitechcloudcli install --extras-only --with ftp. The VSFTPD steps below apply to the container stack's FTP service only.

HiTechCloud Enterprise supports FTP access. Once enabled, a shared FTP server becomes available for all users. First follow this guide on how to enable FTP in HiTechCloud: How to configure FTP server

Step 1: Add a Domain​

To use TLS, you must have an SSL certificate available on the server. Start by adding a domain in one of the following ways:

Once added, HiTechCloud will automatically generate an SSL certificate for the domain (if supported).

Step 2: Verify SSL Certificate Files​

Make sure the SSL certificate and private key files exist on the server. If the certificate was auto-generated, the paths should look like this:

/etc/hitechcloud/caddy/ssl/acme-v02.api.letsencrypt.org-directory/DOMAIN_NAME/DOMAIN_NAME.crt
/etc/hitechcloud/caddy/ssl/acme-v02.api.letsencrypt.org-directory/DOMAIN_NAME/DOMAIN_NAME.key

Replace DOMAIN_NAME with your actual domain name.

Step 3: Enable TLS in VSFTPD​

  1. Go to HiTechAdmin → Services → FTP → Configuration image

  2. Paste the following configuration options to enable TLS:

    ⚠️ Important: Replace DOMAIN_NAME with your domain name in both file paths.

    # Enable SSL
    ssl_enable=YES
    rsa_cert_file=/etc/hitechcloud/caddy/ssl/acme-v02.api.letsencrypt.org-directory/DOMAIN_NAME/DOMAIN_NAME.crt
    rsa_private_key_file=/etc/hitechcloud/caddy/ssl/acme-v02.api.letsencrypt.org-directory/DOMAIN_NAME/DOMAIN_NAME.key

    allow_anon_ssl=NO
    force_local_data_ssl=YES
    force_local_logins_ssl=YES

    ssl_tlsv1=NO
    ssl_sslv2=NO
    ssl_sslv3=NO
    ssl_ciphers=HIGH

  3. Click Save to apply the changes. image2

Step 4: Restart the FTP Service​

  1. Navigate to HiTechAdmin → Services → Services Status.
  2. Locate the FTP service.
  3. Click Stop, then Start to restart the service.

image2

Previous
Setup FTP
Next
How to Install Custom or Older IonCube Loader Versions in HiTechCloud
Was this helpful?