[Unit]
Description=Scan 0x0 files with ClamAV
After=remote-fs.target clamd.service

[Service]
Type=oneshot
User=boop
Group=http
WorkingDirectory=/opt/boop
BindPaths=/opt/boop

Environment=FLASK_APP=fhost
ExecStart=/opt/boop/.local/bin/flask vscan
ProtectProc=noaccess
ProtectSystem=strict
ProtectHome=tmpfs
PrivateTmp=true
PrivateUsers=true
ProtectKernelLogs=true
LockPersonality=true

[Install]
WantedBy=multi-user.target