# nano /etc/ssh/sshd_config
Subsystem sftp /usr/lib/openssh/sftp-server
Match Group sftp_users
X11Forwarding no
AllowTcpForwarding no
ChrootDirectory /var/www
ForceCommand internal-sftp
groupadd sftp_users
usermod -G sftp_users username
# systemctl restart ssh