FTPanel - Pure-FTPd Control Panel

Admin User Management

• Create, edit, and delete FTP accounts
• Set home directory and chroot jail per user
• Assign disk quotas (MB/GB) per account
• Change passwords securely from the dashboard
• Enable or disable accounts without deleting
• Bulk view of all FTP users and their status

Client Self-Service Portal

• Clients log in to manage their own FTP account
• Change password without contacting support
• View current quota usage and limits
• View active sessions and connection history
• Read-only access to their own directory listing
• Separate portal from admin — no privilege escalation

Quota & Storage Control

• Per-user disk quota enforced at filesystem level
• Real-time quota usage display per account
• Soft and hard quota limits supported
• Quota reports viewable from admin dashboard
• Automatic quota enforcement via Pure-FTPd
• No manual quota recalculation needed

Live Connection Monitoring

• View all active FTP connections in real time
• See connected IP, username, and transfer status
• Disconnect any active session from dashboard
• Connection history log per user
• Monitor upload and download activity
• Auto-refreshes without page reload

TLS/SSL Encryption

• TLS encryption enforced for all connections
• Supports Explicit FTPS (STARTTLS)
• Certificate path configurable from admin panel
• Rejects plaintext FTP connections by default
• Compatible with all modern FTP clients
• Let's Encrypt certificate support

Audit Log

• Full activity log of all admin actions
• User login and logout events recorded
• Password changes and quota edits tracked
• Account creation and deletion history
• Filterable by user, action type, and date
• Exportable log for compliance and review

Rsync / SFTP / Restic Backup

• Per-account SSH/rsync access with ForceCommand restriction
• SFTP subsystem enabled - works with Backuply and restic
• Restic backup mode: full SFTP write access for repo storage
• Rsync restricted to rsync + mkdir only - no shell access
• UFW locks SSH port 22 to the client server IP per account
• Password sync - FTP and SSH passwords stay in sync automatically

Virtual User Isolation

All FTP accounts are virtual users stored in PureDB - no system accounts are created. Users are fully chrooted to their home directory and cannot traverse the filesystem.

Role-Based Access Control

Admins have full control. Clients only see and manage their own accounts through a separate portal. There is no path from the client portal to admin functions.

TLS-Only Connections

FTPanel enforces TLS encryption on all connections. Plain FTP is rejected by the configuration. Credentials are never transmitted in cleartext.