<IfDefine TLS>
  TLSEngine on
  TLSRequired on
  TLSRSACertificateFile /etc/pki/tls/certs/localhost.crt
  TLSRSACertificateKeyFile /etc/pki/tls/private/localhost.key
  TLSCipherSuite ALL:!ADH:!DES
  TLSOptions AllowClientRenegotiations NoCertRequest NoSessionReuseRequired
  TLSVerifyClient off
  TLSProtocol TLSv1.2
  TLSLog /var/log/proftpd/tls.log
</IfDefine>

<IfDefine ANONYMOUS_FTP>
  <Anonymous ~ftp>
    User ftp
    Group ftp
    UserAlias anonymous ftp
    RequireValidShell off
  </Anonymous>
</IfDefine>