nix/lib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make clamav use a proper user & state dir

Browse Source
This commit is contained in:
niten 2023-07-30 10:55:00 -07:00
parent cb039ceabd
commit f7966d3fee
1 changed files with 31 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
lib/fudo/mail/clamav.nix
View File

@ -4,22 +4,49 @@ with lib;
let cfg = config.fudo.mail-server;
in {
options.fudo.mail-server.clamav = {
options.fudo.mail-server.clamav = with types; {
enable = mkOption {
description = "Enable virus scanning with ClamAV.";
type = types.bool;
type = bool;
default = true;
};
state-directory = mkOption {
type = str;
description = "Path at which to store the ClamAV database.";
default = "/var/lib/clamav";
};
};
config = mkIf (cfg.enable && cfg.clamav.enable) {
users = {
users.clamav = {
isSystemUser = true;
group = "clamav";
};
groups.clamav = { members = [ "clamav" ]; };
};
systemd.tmpfiles.rules =
[ "d ${cfg.clamav.state-directory} 0750 clamav clamav - -" ];
services.clamav = {
daemon = {
enable = true;
settings = { PhishingScanURLs = "no"; };
settings = {
PhishingScanURLs = "no";
DatabaseDirectory = cfg.clamav.state-directory;
User = "clamav";
};
};
updater = {
enable = true;
settings = {
User = "clamav";
DatabaseDirectory = cfg.clamav.state-directory;
};
};
updater.enable = true;
};
};
}