{ pkgs, lib, ... }: { networking.firewall.allowedTCPPorts = [ 20 21 ]; networking.firewall.allowedTCPPortRanges = [{ from = 51000; to = 51999; }]; services.vsftpd = { enable = true; writeEnable = true; anonymousUser = true; anonymousUserNoPassword = true; anonymousUploadEnable = true; anonymousMkdirEnable = true; anonymousUserHome = "/home/ftp"; extraConfig = '' pasv_enable=Yes pasv_min_port=51000 pasv_max_port=51999 ''; }; }