Add 'roles/ensure_clamav/' from commit 'ecbc5660d2ed91914a76aa36934ef8096d1985f8'
git-subtree-dir: roles/ensure_clamav git-subtree-mainline:6775693835git-subtree-split:ecbc5660d2
This commit is contained in:
@@ -0,0 +1,67 @@
|
||||
---
|
||||
# vars file for ensure_clamav
|
||||
package_list:
|
||||
- name: 'clamav'
|
||||
state: 'present'
|
||||
- name: 'clamav-data'
|
||||
state: 'present'
|
||||
- name: 'clamav-filesystem'
|
||||
state: 'present'
|
||||
- name: 'clamav-lib'
|
||||
state: 'present'
|
||||
- name: 'clamav-update'
|
||||
state: 'present'
|
||||
- name: 'clamd'
|
||||
state: 'present'
|
||||
seboolean_list:
|
||||
- name: 'antivirus_can_scan_system'
|
||||
persistent: 'yes'
|
||||
state: 'yes'
|
||||
service_list:
|
||||
# NOTE: Order is important
|
||||
- name: 'clamd@scan.service'
|
||||
state: 'started'
|
||||
enabled: 'yes'
|
||||
- name: 'clamav-clamonacc.service'
|
||||
state: 'started'
|
||||
enabled: 'yes'
|
||||
- name: 'clamav-freshclam.service'
|
||||
state: 'started'
|
||||
enabled: 'yes'
|
||||
sysctl_list:
|
||||
- name: 'fs.inotify.max_user_watches'
|
||||
state: 'present'
|
||||
sysctl_file: '/etc/sysctl.d/99-clamav.conf'
|
||||
value: '524288'
|
||||
template_list:
|
||||
- dest: '/etc/clamd.d/scan.conf'
|
||||
group: 'root'
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/clamd.d/scan.conf'
|
||||
- dest: '/etc/freshclam.conf'
|
||||
group: 'root'
|
||||
mode: '0600'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/freshclam.conf'
|
||||
- dest: '/etc/logrotate.d/clamav-update'
|
||||
group: 'root'
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logrotate.d/clamav-update'
|
||||
- dest: '/usr/lib/systemd/system/clamav-clamonacc.service'
|
||||
group: 'root'
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/clamav-clamonacc.service'
|
||||
- dest: '/usr/lib/systemd/system/clamav-freshclam.service'
|
||||
group: 'root'
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/clamav-freshclam.service'
|
||||
- dest: '/usr/lib/systemd/system/clamd@.service'
|
||||
group: 'root'
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/usr/lib/systemd/system/clamd@.service'
|
||||
|
||||
Reference in New Issue
Block a user