[ general ]
packages = [
    "openssh-server",
]

[ users.dmitry ]
password = "1234"
pubkeys = [
    "the key",
    "the second key",
]

[ users.nadia ]
password = "2345"
pubkeys = [
    "the key2",
]

[groups.sftp-users]
users = ["dmitry"]

[configs."/etc/ssh/sshd_config.d/sftp.conf"]
body = """
Match group sftp-users
  ChrootDirectory /chroot
  ForceCommand internal-sftp
  AllowTcpForwarding no
"""
permissions = 644
owner = "root:root"