Sftp Upload Only
In short - simple upload folder.
$ sudo useradd -d /storarray/local/upload -m upload
$ sudo mkdir /storarray/local/upload/upload
$ sudo chmod 370 /storarray/local/upload/upload
$ sudo chown root:root /storarray/local/upload
$ sudo grep upload.conf /etc/ssh/sshd_config
Include /etc/ssh/sshd_config.d/upload.conf
$
# /etc/ssh/sshd_config.d/upload.conf
Match User upload
ChrootDirectory %h
ForceCommand internal-sftp
PasswordAuthentication yes
PubkeyAuthentication yes
PermitTunnel no
AllowAgentForwarding no
AllowTcpForwarding no
X11Forwarding no
$ sudo systemctl restart sshd.service
Source: archwiki