I'm trying to set up an SFTP server for a use case. I need the server to be extremely secure. What are the best practices that I should keep in mind?
I referred a lot of blogs and posts but couldn't find an end-to-end guide for setting up a secure SFTP server. These are the points that I got from different posts:
- Create an SFTP only user with no login
- Create chroot jail environment to isolate or protect other locations of the server
- Use public key authentication instead of password authentication
- Disable password authentication for the user, etc.
In addition to these points, is there any other standards to follow for setting up a server. Or How highly secure environments like banks, hospitals, etc setup SFTP servers?
Any links or guidance would be appreciated. Thanks.