qumulo_ftp_settings (Resource)¶

Manages FTP server settings on a Qumulo cluster.

This is a singleton resource (one per cluster). It configures the FTP server settings for file transfers.

Example Usage¶

Basic Configuration¶

resource "qumulo_ftp_settings" "main" {
  connection_profile = "prod"

  enabled                       = true
  chroot_users                  = true
  allow_unencrypted_connections = false
  greeting                      = "Welcome to Qumulo FTP"
}

With Anonymous User¶

resource "qumulo_ftp_settings" "main" {
  connection_profile = "prod"

  enabled                       = true
  chroot_users                  = true
  allow_unencrypted_connections = false
  greeting                      = "Welcome to Qumulo FTP"

  anonymous_user {
    id_type  = "LOCAL_USER"
    id_value = "ftp_anonymous"
  }
}

Multi-Cluster with for_each¶

variable "clusters" {
  type = set(string)
  default = ["prod", "dr"]
}

resource "qumulo_ftp_settings" "main" {
  for_each = var.clusters

  connection_profile = each.value

  enabled      = true
  chroot_users = true
}

Import¶

using the connection profile name:

terraform import qumulo_ftp_settings.main "prod"

Schema¶

Required¶

connection_profile (String) Name of a connection profile from the provider block. See the provider reference for how to define profiles.

Optional¶

allow_unencrypted_connections (Boolean) Allow unencrypted FTP connections. Set to false to require FTPS. Defaults to true.
anonymous_user (Block, Optional) Identity used for anonymous FTP logins. If not specified, anonymous access is disabled.

The anonymous user maps to a local or AD user identity for permission checking. (see below for nested schema) - check_remote_host (Boolean) Ensure all session connections originate from the same host. Disabling this allows FXP (server-to-server) transfers. Defaults to true. - chroot_users (Boolean) Restrict users to their home directory. When enabled, users cannot navigate outside their home. Defaults to false. - enabled (Boolean) Enable or disable FTP connections. Defaults to false. - expand_wildcards (Boolean) Enable wildcard expansion in LIST and NLST commands. Defaults to false. - greeting (String) Custom 220 greeting message displayed when clients connect. Defaults to the Qumulo banner. - log_operations (Boolean) Log FTP operations for auditing. Defaults to true.

Nested Schema for `anonymous_user`¶

Required:

id_type (String) The type of identity. Valid values: LOCAL_USER, LOCAL_GROUP, NFS_GID, NFS_UID, SMB_SID, INTERNAL, QUMULO_OPERATOR.
id_value (String) The identity value (e.g., username, group name, SID, UID/GID).