Added ClamAV and ClamAV SystemD daemon package installations

roles/bootstrap/handlers/nextcloud.yml

@@ -17,10 +17,6 @@
     # @TODO see if setting below is necessary given use of reverse proxy
     - name: Set trusted domains
       block:
-        - name: Set localhost as trusted domain
-          ansible.builtin.command:
-            cmd: "/snap/bin//snap/bin/nextcloud.occ config:system:set trusted_domains 0 --value='localhost'"
-        # @TODO see if setting below is necessary given use of reverse proxy
         - name: Set FQDN as trusted domain
           ansible.builtin.command:
             cmd: "/snap/bin//snap/bin/nextcloud.occ config:system:set trusted_domains 1 --value='cloud.{{ hostvars[inventory_hostname].fqdn }}'"
@@ -28,6 +24,7 @@
     - name: Set trusted reverse proxy addresses
       block:
         - name: Set trusted reverse proxy IPv4 address based on hostname
+          # @TODO create config.trusted_revproxy_ips data structure in bootstrap role's vars dir--may include loopback addresses
           when: config.trusted_revproxy_ips.ipv4 is None or len(config.trusted_revproxy_ips.ipv4) < 1
           ansible.builtin.command:
             argv:
@@ -65,4 +62,8 @@
           loop: "{{ config.trusted_revproxy_ips.ipv6 }}"
           loop_control:
             index_var: idx
+    # @TODO create task based on shell command `sudo /snap/bin/nextcloud.occ config:system:set default_phone_region --value="US"`
+    # @TODO create task based on shell command `sudo /snap/bin/nextcloud.occ config:system:set overwriteprotocol --value="https"` for Caddy task
+    # @TODO create task based on shell command:
+    #   `sudo /snap/bin/nextcloud.occ config:system:set overwrite.cli.url --value="https://cloud.{{ fqdn }}"` for Caddy task
     # @TODO create system-level bash alias for `/snap/bin/nextcloud.occ` command

roles/bootstrap/handlers/podman.yml

@@ -2,7 +2,7 @@
 ---
 # handlers file for bootstrap
 - name: Pull podman images
-  listen: rsync
+  listen: podman
   block:
     - name: Pull container images via podman
       containers.podman.podman_image:

roles/bootstrap/vars/main/software.yml

@@ -193,13 +193,14 @@ software:
     proftpd-mod-crypto:
       name:
         apt: proftpd-mod-crypto
-    # proftpd-mod-ldap:
+    # @TODO write configuration files and handler for below two package installations
-    #   name:
+    #    based on: 
-    #     apt: proftpd-mod-ldap
+    clamav:
-    # @TODO manually install the commented below on current active new VPS, then uncomment
+      name:
-    # proftpd-mod-clamav:
+        apt: clamav
-    #   name:
+    clamd:
-    #     apt: proftpd-mod-clamav
+      name:
+        apt: clamav-daemon
     proftpd:
       name:
         apt: proftpd
@@ -211,7 +212,7 @@ software:
         apt: rsync
     # rclone:
     #   name:
-    #     apt: rsync 
+    #     apt: rclone
     aria:
       name:
         apt: aria2