luzifer/base/usr/share/luzifer/base-setup/roles/clamav/tasks/main.yaml
Knut Ahlers c65775f12e
Fix: Freshclam needs to be enabled too
Signed-off-by: Knut Ahlers <knut@ahlers.me>
2024-08-29 01:04:49 +02:00

53 lines
1.3 KiB
YAML

---
- name: Collect mountpoints for /home
command:
cmd: bash -ec 'df --output=target | grep ^/home'
changed_when: false
register: home_mounts
- name: Install clamd config
template:
src: templates/clamd.conf
dest: /etc/clamav/clamd.conf
mode: '0644'
owner: root
register: clamd_conf
- name: Create clamonacc override dir
file:
dest: /etc/systemd/system/clamav-clamonacc.service.d
state: directory
- name: Install clamonacc override
copy:
content: |
[Service]
ExecStart=
ExecStart=/usr/sbin/clamonacc -F --fdpass --log=/var/log/clamav/clamonacc.log --move=/root/quarantine
dest: /etc/systemd/system/clamav-clamonacc.service.d/override.conf
mode: '0644'
owner: root
register: clamav_clamonacc_override_conf
- name: Enable clamav services
systemd:
daemon_reload: true
enabled: true
name: '{{ item }}'
with_items:
- clamav-daemon.service
- clamav-clamonacc.service
- clamav-freshclam.service
- name: Restart clamav services
systemd:
name: '{{ item }}'
state: restarted
with_items:
- clamav-freshclam.service
- clamav-daemon.service
- clamav-clamonacc.service
when: clamd_conf.changed or clamav_clamonacc_override_conf.changed and pacman_action != "install"
...