Update to 2021-12-01 19:13

roles/clamav/templates/clamd.conf.j2

@@ -0,0 +1,12 @@
+LogSyslog yes
+LogVerbose yes
+ExtendedDetectionInfo yes
+LocalSocket /var/run/clamav/clamd.sock
+LocalSocketMode 666
+TCPSocket {{ clam_listen_port }}
+TCPAddr {{ clam_listen_ip }}
+StreamMinPort {{ clam_stream_port_min }}
+StreamMaxPort {{ clam_stream_port_max }}
+StreamMaxLength {{ clam_stream_max_size }}M
+ExitOnOOM yes
+Foreground yes

roles/clamav/templates/clamd.service.j2

@@ -0,0 +1,13 @@
+[Unit]
+Description=ClamAV antivirus daemon
+After=syslog.target network.target
+
+[Service]
+Type=simple
+ExecStart=/usr/sbin/clamd -c /etc/clamd.conf
+User={{ clam_user }}
+Group={{ clam_group }}
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target

roles/clamav/templates/freshclam.conf.j2

@@ -0,0 +1,12 @@
+DatabaseDirectory /var/lib/clamav
+LogVerbose yes
+LogSyslog yes
+Checks {{ clam_safebrowsing | ternary('48','12') }}
+DatabaseOwner clamupdate
+DatabaseMirror {{ clam_mirror }}
+{% for custom in clam_custom_db_url %}
+DatabaseCustomURL={{ custom }}
+{% endfor %}
+NotifyClamd /etc/clamd.conf
+Foreground yes
+SafeBrowsing {{ clam_safebrowsing | ternary('yes','no') }}

roles/clamav/templates/freshclam.service.j2

@@ -0,0 +1,15 @@
+[Unit]
+Description=ClamAV signature updater
+After=network.target
+
+[Service]
+Type=simple
+User=clamupdate
+Group=clamupdate
+ExecStart=/usr/bin/freshclam --stdout --daemon
+Restart=on-failure
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
+