Skip to content

Clamav

services.clamav.daemon.enable

Whether to enable ClamAV clamd daemon. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.daemon.settings

ClamAV configuration. Refer to https://linux.die.net/man/5/clamd.conf, for details on supported values.

Type: attribute set of (boolean or signed integer or string or list of string)

Default

{ }

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.fangfrisch.enable

Whether to enable ClamAV fangfrisch updater. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.fangfrisch.interval

How often freshclam is invoked. See systemd.time(7) for more information about the format.

Type: string

Default

"hourly"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.fangfrisch.settings

fangfrisch configuration. Refer to https://rseichter.github.io/fangfrisch/#_configuration, for details on supported values. Note that by default urlhaus and sanesecurity are enabled.

Type: attribute set of attribute set of (string or signed integer or boolean)

Default

{ }

Example

{securiteinfo = {customer_id = "your customer_id";enabled = "yes";};}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.package

The clamav package to use. Type: package

Default

pkgs.clamav

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.scanner.enable

Whether to enable ClamAV scanner. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.scanner.interval

How often clamdscan is invoked. See systemd.time(7) for more information about the format. By default this runs using 10 cores at most, be sure to run it at a time of low traffic.

Type: string

Default

"*-*-* 04:00:00"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.scanner.scanDirectories

List of directories to scan. The default includes everything I could think of that is valid for nixos. Feel free to contribute a PR to add to the default if you see something missing.

Type: list of string

Default

["/home""/var/lib""/tmp""/etc""/var/tmp"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.updater.enable

Whether to enable ClamAV freshclam updater. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.updater.frequency

Number of database checks per day.

Type: signed integer

Default

12

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.updater.interval

How often freshclam is invoked. See systemd.time(7) for more information about the format.

Type: string

Default

"hourly"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix

services.clamav.updater.settings

freshclam configuration. Refer to https://linux.die.net/man/5/freshclam.conf, for details on supported values.

Type: attribute set of (boolean or signed integer or string or list of string)

Default

{ }

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/security/clamav.nix