63 lines
1.9 KiB
YAML
63 lines
1.9 KiB
YAML
---
|
|
# vars file for ensure_clamav
|
|
package_list:
|
|
- name: 'clamav'
|
|
state: 'present'
|
|
- name: 'clamav-data'
|
|
state: 'present'
|
|
- name: 'clamav-filesystem'
|
|
state: 'present'
|
|
- name: 'clamav-lib'
|
|
state: 'present'
|
|
- name: 'clamav-update'
|
|
state: 'present'
|
|
- name: 'clamd'
|
|
state: 'present'
|
|
seboolean_list:
|
|
- name: 'antivirus_can_scan_system'
|
|
persistent: 'yes'
|
|
state: 'yes'
|
|
service_list:
|
|
# NOTE: Order is important
|
|
- name: 'clamd@scan.service'
|
|
state: 'started'
|
|
enabled: 'yes'
|
|
- name: 'clamav-clamonacc.service'
|
|
state: 'started'
|
|
enabled: 'yes'
|
|
- name: 'clamav-freshclam.service'
|
|
state: 'started'
|
|
enabled: 'yes'
|
|
sysctl_list:
|
|
- name: 'fs.inotify.max_user_watches'
|
|
state: 'present'
|
|
sysctl_file: '/etc/sysctl.d/99-clamav.conf'
|
|
value: '524288'
|
|
template_list:
|
|
- dest: '/etc/clamd.d/scan.conf'
|
|
group: 'root'
|
|
mode: '0644'
|
|
owner: 'root'
|
|
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/clamd.d/scan.conf'
|
|
- dest: '/etc/freshclam.conf'
|
|
group: 'root'
|
|
mode: '0600'
|
|
owner: 'root'
|
|
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/freshclam.conf'
|
|
- dest: '/usr/lib/systemd/system/clamav-clamonacc.service'
|
|
group: 'root'
|
|
mode: '0644'
|
|
owner: 'root'
|
|
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/clamav-clamonacc.service'
|
|
- dest: '/usr/lib/systemd/system/clamav-freshclam.service'
|
|
group: 'root'
|
|
mode: '0644'
|
|
owner: 'root'
|
|
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/clamav-freshclam.service'
|
|
- dest: '/usr/lib/systemd/system/clamd@.service'
|
|
group: 'root'
|
|
mode: '0644'
|
|
owner: 'root'
|
|
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/clamd@.service'
|
|
|