AllowGroups ... ssh-ftp-only ...

...

Match Group ssh-ftp-only
        ChrootDirectory %h
        ForceCommand internal-sftp -d upload
        PermitTTY no

##</code><code>##

drwxr-x--- 5 root   user     4096 Jun 12  2017 /home/user/
drwx------ 2 root   root     4096 Nov  7  2016 /home/user/.ssh
drwxr-xr-x 2 user   user     4096 Feb 27  2020 /home/user/upload