AllowUsers user1 user2 https://ostechnix.com/allow-deny-ssh-access-particular-user-group-linux/
Match user ben_files
# The following two directives force ben_files to become chrooted
# and only have sftp available. No other chroot setup is required.
ChrootDirectory /var/www/vhosts/mydomain.com/files
#ForceCommand internal-sftp
ForceCommand /usr/bin/git
# For additional paranoia, disallow all types of port forwardings.
AllowTcpForwarding no
GatewayPorts no
X11Forwarding no