access Commands
Managed file access for simai-env.
Current batch ships:
globalfile access toWWW_ROOTprojectfile access with chroot isolation- SFTP-only users via
internal-sftp - password-based access
- SSH key additions
Not in this batch:
- SSH key management
access list
List managed access entries.
Examples:
simai-admin.sh access list
simai-admin.sh access list --domain example.com
Options:
--domain <domain>(optional; filter to one site)
access show
Show one access entry.
Options:
--login <login>(required outside menu)
access create-global
Create a global SFTP-only user with access to all projects under WWW_ROOT.
Options:
--login <login>(required outside menu)--password <password>(optional; autogenerated when omitted)
access create-project
Create a project-scoped SFTP-only user with access to one site.
Options:
--domain <domain>(required outside menu)--login <login>(required outside menu)--password <password>(optional; autogenerated when omitted)
Notes:
- project access is isolated with
ChrootDirectoryand a bind mount - the project root must live under
WWW_ROOT - on systemd hosts, a
.mountunit is created under/etc/systemd/systemto persist the bind mount across reboots
access disable
Disable one access entry by locking its Unix user.
Options:
--login <login>(required outside menu)
access enable
Enable one access entry by unlocking its Unix user.
Options:
--login <login>(required outside menu)
access reset-password
Reset password for one access entry.
Options:
--login <login>(required outside menu)--password <password>(optional; autogenerated when omitted)
access remove
Remove one access entry and its system user.
Options:
--login <login>(required outside menu)
access add-key
Add an SSH public key to an access entry.
Options:
--login <login>(required outside menu)--pubkey-file <path>(required outside menu)