---
# vars file for ensure_clamav
package_list:
  - name: 'clamav'
    state: 'present'
  - name: 'clamav-data'
    state: 'present'
  - name: 'clamav-filesystem'
    state: 'present'
  - name: 'clamav-lib'
    state: 'present'
  - name: 'clamav-update'
    state: 'present'
  - name: 'clamd'
    state: 'present'
seboolean_list:
  - name: 'antivirus_can_scan_system'
    persistent: 'yes'
    state: 'yes'
service_list:
# NOTE: Order is important
  - name: 'clamd@scan.service'
    state: 'started'
    enabled: 'yes'
  - name: 'clamav-clamonacc.service'
    state: 'started'
    enabled: 'yes'
  - name: 'clamav-freshclam.service'
    state: 'started'
    enabled: 'yes'
sysctl_list:
  - name: 'fs.inotify.max_user_watches'
    state: 'present'
    sysctl_file: '/etc/sysctl.d/99-clamav.conf'
    value: '524288'
template_list:
  - dest: '/etc/clamd.d/scan.conf'
    group: 'root'
    mode: '0644'
    owner: 'root'
    src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/clamd.d/scan.conf'
  - dest: '/etc/freshclam.conf'
    group: 'root'
    mode: '0600'
    owner: 'root'
    src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/freshclam.conf'
  - dest: '/usr/lib/systemd/system/clamav-clamonacc.service'
    group: 'root'
    mode: '0644'
    owner: 'root'
    src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/clamav-clamonacc.service'