{ lib, pkgs, ... }:
{
   config.services.vsftpd = {
     enable = true;
     localUsers = true;
     writeEnable = true;
     chrootlocalUser = true;
     userDbPath = "/etc/vsftpd/users";
     enableVirtualUsers = true;
     virtualUseLocalPrivs = true;
     localRoot = "/var/lib/vsftpd/data";
     extraConfig = "local_umask=002";
   };

   config.networking.firewall.allowedTCPPorts = [ 20 21 ];
}