1. How to setup a restricted OpenSSH sftp server?

To set up a restricted sftp server you should use the "ForceCommand" and "ChrootDirectory" directives in sshd_config. If you don't want to restrict every user, you should also use the "Match" directive ...