FTPS on Surfer?

[imc67]

I use a Surfer instance as a SFTP server / backup location for IOT kinda things. However one of the devices only talks FTPS.

Is it possible / easy to implement also FTPS in Surfer?

[girish]

I think like SFTP, this probably has to implemented at the platform level instead of the app. We use proftpd which supports both FTPS and SFTP. IIRC, the issue with enabling FTPS was a) the protocol is quite legacy and it wants to open up a lot of ephemeral ports. This means we have to block apps too from using these ports and b) it works off TLS certs that currently the container doesn't have access to. I recall that using self signed certs doesn't work on many devices.

Also, on a side note, these IOT things sometimes don't accept that recent Let's Encrypt certs because they don't trust the root. So, sometimes your only option is plain FTP actually. Do you know for sure that it supports FTPS?

[imc67]

It's in this case a Reolink POE Video Doorbell and it says as warning:

Data transfer will not be encrypted when using FTP. We recommend using it on your home and work networks, but not public ones. Or, you can enable FTPS on this device and on FTP server to secure data transfer. Are you sure to enable FTP?

So it can also use FTP but of course for video files of visitors it's not safe imho.

Maybe I should ask Reolink to implement SFTP

[imc67]

Solved! Hetzner StorageBox accepts ALL transfer protocols so I upload to a StorageBox sub and that sub is connected as a volume to Jellyfin!
Perfect!