exp/infra
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

commit

Browse source
This commit is contained in:
kirbara 2025-12-05 18:44:17 +07:00
parent 31560f486a
commit 2e41b73306
Signed by: exp
GPG key ID: D7E63AD0019E75D9
6 changed files with 141 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

64
module/aspect/clamav.nix Normal file
View file

@ -0,0 +1,64 @@
{
den.aspects = {
clamav = {
nixos =
{ pkgs, ... }:
{
environment.systemPackages = [
pkgs.clamav
];
services.clamav = {
daemon = {
enable = true;
settings = {
# logging & performance
LogFile = "/var/log/clamav/clamd.log";
LogTime = true;
LogVerbose = false;
ExtendedDetectionInfo = true;
PidFile = "/run/clamav/clamd.pid";
TemporaryDirectory = "/tmp";
LocalSocket = "/run/clamav/clamd.ctl";
# scanning limits
MaxScanSize = "100M";
MaxFileSize = "100M";
MaxRecursion = 16;
MaxFiles = 10000;
StreamMaxLength = "25M";
# heuristics & security
HeuristicAlerts = true;
StructuredDataDetection = false;
ScanPE = true;
ScanELF = true;
ScanOLE2 = true;
ScanPDF = true;
ScanHTML = true;
ScanArchive = true;
# anti phishing
AlertPhishingSSLMismatch = true;
AlertPhishingCloak = true;
DetectPUA = true;
# bytecode
Bytecode = true;
BytecodeSecurity = "Paranoid";
BytecodeTimeout = 60000;
# real-time protection
# ScanOnAccess = true;
# OnAccessPrevention = true;
# OnAccessExtraScanning = true;
# OnAccessExcludeUname = "clamav"; # prevent loop
# OnAccessIncludePath = [
# "/home"
# "/tmp"
# ];
};
};
updater = {
enable = true;
interval = "daily";
};
};
};
};
};
}