Subsystem sftp internal-sftp

Match Group sftp
    PasswordAuthentication yes
    PubkeyAuthentication yes
    ForceCommand internal-sftp -u 0027
    ChrootDirectory %h
    PermitTunnel no
    AllowAgentForwarding no
    AllowTcpForwarding no
    X11Forwarding no