work: setup clamav

This commit is contained in:
Motiejus Jakštys 2024-03-19 14:24:29 +02:00 committed by Motiejus Jakštys
parent 24b7c72aca
commit 72ac0d75a1

View File

@ -22,6 +22,41 @@
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
services.clamav = {
updater.enable = true;
daemon = {
enable = true;
settings = {
ScanMail = false;
ScanArchive = false;
ExcludePath = [
"^/proc"
"^/sys"
"^/dev"
"^/nix"
"^/var"
"^/home/.cache"
"^/home/.go"
"^/home/dev"
"^/home/code"
];
};
};
};
# TODO remove once 24.05 is out
systemd.services.clamav-daemon.serviceConfig = {
StateDirectory = "clamav";
RuntimeDirectory = "clamav";
User = "clamav";
Group = "clamav";
};
systemd.services.clamav-freshclam.serviceConfig = {
StateDirectory = "clamav";
User = "clamav";
Group = "clamav";
};
home-manager.users.${config.mj.username} = { home-manager.users.${config.mj.username} = {
home.sessionVariables.GOPRIVATE = "github.com/chronosphereio"; home.sessionVariables.GOPRIVATE = "github.com/chronosphereio";
programs = { programs = {