# This needs to be separated into two sshd servers.

Port 22
Port 22010
AddressFamily any
ListenAddress localhost:22
ListenAddress web.stashbox:22
ListenAddress rsync.stashbox:22010

AuthorizedKeysFile      .ssh/authorized_keys
Subsystem sftp internal-sftp

Match Group backup
    ChrootDirectory /backup/tenants/%u
    ForceCommand internal-sftp
    AllowTCPForwarding no
    AllowAgentForwarding no
    X11Forwarding no

Match Group collections
    ChrootDirectory /data/collections/%u
    ForceCommand internal-sftp
    AllowTCPForwarding no
    AllowAgentForwarding no
    X11Forwarding no