Can I just redirect it into only the web directory
No, because owner of chroot target directory must be root.
/home/USER/web/ directory is owned by root.
My bad, using ChrootDirectory %h/web instead of ChrootDirectory %h in /etc/ssh/sshd_config works well.
thx ![]()