{ lib, pkgs, ... }:
{
   config.services.vsftpd = {
     enable = true;
     localUsers = true;
     writeEnable = true;
     chrootlocalUser = true;
     allowWriteableChroot = true;
     userlist = [ "scan" ];
   };

   config.users.users.scan = {
     isNormalUser = true;
   };

   config.networking.firewall.allowedTCPPorts = [ 21 ];
}