Skip to content

Feature request: environment variable for a private ClamAV mirror (freshclam PrivateMirror) #123

Description

@bernd670

Is your feature request related to a problem?

FileRise supports CLAMAV_AUTO_UPDATE to enable/disable the freshclam run at startup, but there's no way to point freshclam at a private/local mirror without manually mounting a custom freshclam.conf into the container.

Describe the solution you'd like

A new environment variable (e.g. CLAMAV_MIRROR_URL or FR_CLAMAV_PRIVATE_MIRROR) that start.sh writes into freshclam.conf as a PrivateMirror entry before invoking freshclam, similar to how TIMEZONE / TOTAL_UPLOAD_SIZE are already applied to config.php via sed.

Per the ClamAV docs, PrivateMirror:

  • disables the DNS version check (freshclam uses If-Modified-Since / file headers instead)
  • overrides DatabaseMirror, DNSDatabaseInfo, and ScriptedUpdates
  • can be specified multiple times as fallback mirrors

So ideally the variable would accept multiple values (comma- or newline-separated, similar to FR_IGNORE_REGEX / FR_TRUSTED_PROXIES) to support fallback mirrors.

Describe alternatives you've considered

Currently mounting a full custom freshclam.conf as a volume works, but it means maintaining the entire file (and re-syncing it if the image's default config changes) just to change the mirror.

Use case

Running FileRise in an offline/air-gapped environment where a local ClamAV mirror is the only reachable signature source.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions