apiVersion: v1
kind: ConfigMap
metadata:
  name: nas-sshd-config
  namespace: nas
data:
  00-chroot.conf: |
    Subsystem sftp internal-sftp
    Match User nas
      ChrootDirectory /config
      ForceCommand internal-sftp -d /data
      AllowTcpForwarding no
      X11Forwarding no
      PermitTunnel no