From a904922cbd6f6478d5e7fd773adc368b7652adaa Mon Sep 17 00:00:00 2001
From: Mia Herkt <mia@0x0.st>
Date: Mon, 12 Dec 2022 07:25:30 +0100
Subject: Add support for ClamAV

---
 0x0-vscan.service | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 0x0-vscan.service

(limited to '0x0-vscan.service')

diff --git a/0x0-vscan.service b/0x0-vscan.service
new file mode 100644
index 0000000..6a48b1c
--- /dev/null
+++ b/0x0-vscan.service
@@ -0,0 +1,22 @@
+[Unit]
+Description=Scan 0x0 files with ClamAV
+After=remote-fs.target clamd.service
+
+[Service]
+Type=oneshot
+User=nullptr
+WorkingDirectory=/path/to/0x0
+BindPaths=/path/to/0x0
+
+Environment=FLASK_APP=fhost
+ExecStart=/usr/bin/flask vscan
+ProtectProc=noaccess
+ProtectSystem=strict
+ProtectHome=tmpfs
+PrivateTmp=true
+PrivateUsers=true
+ProtectKernelLogs=true
+LockPersonality=true
+
+[Install]
+WantedBy=multi-user.target
-- 
cgit v1.2.3