{
  config,
  lib,
  pkgs,
  ...
}:
let
  cfg = config.os.srv.clamav;
in
{
  options.os.srv.clamav.enable = lib.mkEnableOption "enables clamav scanning";
  config = lib.mkIf cfg.enable {
    services.clamav = {
      daemon = {
        enable = true;
        settings = {
          MaxThreads = 20;
          MaxQueue = 100;
        };
      };
      scanner.enable = true;
      updater.enable = true;
      fangfrisch.enable = true;
    };
    environment.systemPackages = [ pkgs.aide ];
  };
}