allow setting clamav mirror site

README.md

@@ -38,7 +38,7 @@ This container implement's the excellent [s6-overlay](https://github.com/just-co
 | `postfix` | Runs postfix | Always |
 | `clamav-milter` | Part of ClamAV. Runs the `clamav-milter` for scanning emails for virii. | If `ENABLE_CLAMAV` is set to `true` |
 | `clamd` | Part of ClamAV. Runs `clamd`, the virus scanning engine for `clamav-milter`. |  If `ENABLE_CLAMAV` is set to `true` |
-| `freshclam` | Part of ClamAV. Runs `freshclam` on the schedule defined by `FRESHCLAM_CHECKS_PER_DAY` to keep the ClamAV database updated. | If `ENABLE_CLAMAV` is set to `true` |
+| `freshclam` | Part of ClamAV. Runs `freshclam` against the mirror definedy by `FRESHCLAM_DB_MIRROR` (defaults to `database.clamav.net`) on the schedule defined by `FRESHCLAM_CHECKS_PER_DAY`, to keep the ClamAV database updated. | If `ENABLE_CLAMAV` is set to `true` |
 | `opendkim` | Runs `opendkim` for DKIM signing/verification. | If `ENABLE_OPENDKIM` is set to `true` |
 | `postgrey` | Runs `postgrey` for greylisting. | If `ENABLE_POSTGREY` is set to `true` |
 | `postgrey_whitelist_update` | Runs daily. Fetches the latest system whitelist from <https://postgrey.schweikert.ch/pub/postgrey_whitelist_clients>, merges with any locally defined whitelist, and reloads `postgrey`. | If `ENABLE_POSTGREY` is set to `true` |
@@ -327,6 +327,7 @@ If `ENABLE_LDAP_RECIPIENT_ACCESS` is enabled, the final `smtpd_recipient_restric
 | Environment Variable               | Detail                                                                  |
 |------------------------------------|-------------------------------------------------------------------------|
 | `FRESHCLAM_CHECKS_PER_DAY`         | Optional. Number of database checks per day. Default: `12` (every two hours). |
+| `FRESHCLAM_DB_MIRROR`              | Optional. The hostname to fetch ClamAV updates from. Default: `database.clamav.net`. |
 | `CLAMAV_MILTER_REPORT_HOSTNAME`    | Optional. The hostname ClamAV Milter will report in the `X-Virus-Scanned` header. If unset, defaults to the container's hostname. |
 | `CLAMAV_MILTER_ALLOWLIST` | Optional. Sets ClamAV Milter's [`Whitelist`](https://linux.die.net/man/5/clamav-milter.conf) option. |
 | `CLAMAV_CLAMD_PHISHING_SIGNATURES`       | Optional. Overrides ClamAV Daemon's default setting for [`PhishingSignatures`](https://linux.die.net/man/5/clamd.conf). |
@@ -335,7 +336,6 @@ If `ENABLE_LDAP_RECIPIENT_ACCESS` is enabled, the final `smtpd_recipient_restric
 | `CLAMAV_CLAMD_PHISHING_ALWAYS_BLOCK_CLOAK` | Optional. Overrides ClamAV Daemon's default setting for [`PhishingAlwaysBlockCloak`](https://linux.die.net/man/5/clamd.conf). |
 | `CLAMAV_CLAMD_HEURISTIC_SCAN_PRECEDENCE` | Optional. Overrides ClamAV Daemon's default setting for [`HeuristicScanPrecedence`](https://linux.die.net/man/5/clamd.conf). |
 
-
 ## Configuration Files
 
 The following files can be optionally configured.
@@ -568,4 +568,4 @@ I also have a [Discord channel](https://discord.gg/k8qUEEG), feel free to [join]
 * <http://www.postfix.org/documentation.html>: Postfix Documentation.
 * <http://opendkim.org/opendkim-README>: OpenDKIM Readme.
 * <https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/>: A fantastic HOWTO (dated, but still very much relevant).
-* <https://petervibert.com/wp/expect-smtp-script/>: plagiarized their expect script and made some modifications for the testing script.
+* <https://petervibert.com/wp/expect-smtp-script/>: plagiarized their expect script and made some modifications for the testing script.

rootfs/etc/cont-init.d/30-clamav-generate-freshclam.conf.sh

@@ -10,7 +10,7 @@
     echo "DatabaseOwner clamav"
     echo "Foreground yes"
     echo "Bytecode yes"
-    echo "DatabaseMirror database.clamav.net"
+    echo "DatabaseMirror ${FRESHCLAM_DB_MIRROR:-database.clamav.net}"
     echo "NotifyClamd /usr/local/etc/clamd.conf"
 
     if [ -n "${FRESHCLAM_CHECKS_PER_DAY}" ]; then