Enable FTPS on your managed SFTPGo instance

Your DANIAN SFTPGo instance serves SFTP on port 2023 (or another designated port) and explicit FTPS (FTPES, AUTH TLS) on port 2122 (or another designated port). FTPS is TLS-only: the server refuses plaintext logins, and the certificate is a Let's Encrypt cert issued for your instance hostname.

To connect an FTPS client, set the protocol to explicit FTPS (also called FTPES or AUTH TLS), host to your instance hostname such as 123.apps.danian.cloud, port 2122 (or another designated port), and passive mode on. Always use the hostname, never the raw IP: the certificate has no IP SAN, so strict validation fails against an IP address.

Some ERP and legacy integrations only speak implicit FTPS or plain FTP and drop the connection right after the greeting. If your partner client cannot do explicit TLS, contact support: a second binding with implicit TLS can be added on a new port, and custom binding options persist across restarts because only the first binding is rewritten at startup.

If a partner connects and authenticates but transfers stall, ask support to verify the passive IP advertisement (force_passive_ip) in /app/data/sftpgo.json. Behind container networking the passive reply can otherwise advertise an internal address.