* Sat Feb 15 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-7.sme

- disable anonymous by default [SME: 931]
- add passive port [SME: 12454]
- TLSv1.3 filtered out as not supported by 1.3.6 branch [SME: 12925]
- fix wrong group defined for ibays [SME: 7914]
- drop runit for full systemd service unit [SME: 12874]

root/usr/lib/systemd/system/ftp.service

@@ -4,12 +4,24 @@ After=network.target
 Requires=runit.service
 
 [Service]
-Type=oneshot
+Type=simple
+SyslogIdentifier=proftpd
+Environment=CONCURRENCYREMOTE=40 PER_IP_INSTANCES=4 LOCALNAME=0 LISTENIP=0 PORT=ftp
+WorkingDirectory=/var/service/proftpd/
 ExecStartPre=/sbin/e-smith/service-status ftp
-ExecStart=/usr/bin/sv u /service/ftp
-ExecStop=/usr/bin/sv stop /service/ftp
-ExecReload=/usr/bin/sv t /service/ftp
-RemainAfterExit=yes
+ExecStartPre=/sbin/e-smith/systemd/ftp-tcpsvd
+ExecStart=/usr/bin/tcpsvd \
+	-v \
+	-i ./peers \
+	-c $CONCURRENCYREMOTE \
+	-C ${PER_IP_INSTANCES}:'421 per host concurrency limit reached\r\n' \
+	-l $LOCALNAME \
+	$LISTENIP \
+	$PORT \
+	/usr/sbin/in.proftpd
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=always
+RestartSec=20s
 
 [Install]
 WantedBy=sme-server.target