# 🤖 Carries each TCP connection to clamd's unix socket. Bound to the self-test
# like the socket is, so connections in flight are cut when the test's unit
# goes inactive.
[Unit]
Description=Proxy TCP 3310 to clamd's unix socket
Requires=scanner-selftest.service
After=scanner-selftest.service
BindsTo=scanner-selftest.service

[Service]
ExecStart=/usr/lib/systemd/systemd-socket-proxyd /run/clamav/clamd.ctl
DynamicUser=yes
SupplementaryGroups=clamav
PrivateTmp=yes
NoNewPrivileges=yes