#!/usr/bin/env bash
# Wrapper für ClamAV-Verwaltung via MailWolt UI (läuft als root via sudo)
set -euo pipefail

CMD="${1:-status}"

case "$CMD" in
  install)
    export DEBIAN_FRONTEND=noninteractive
    apt-get install -y clamav clamav-daemon clamav-freshclam 2>&1
    systemctl enable clamav-freshclam 2>/dev/null || true
    systemctl start  clamav-freshclam 2>/dev/null || true
    echo "ClamAV installiert."
    ;;
  enable)
    systemctl enable clamav-daemon
    systemctl start --no-block clamav-daemon
    echo "ClamAV aktiviert, Startvorgang eingeleitet."
    ;;
  disable)
    systemctl stop    clamav-daemon || true
    systemctl disable clamav-daemon
    echo "ClamAV gestoppt und deaktiviert."
    ;;
  freshclam)
    systemctl stop clamav-freshclam 2>/dev/null || true
    freshclam --quiet
    systemctl start clamav-freshclam 2>/dev/null || true
    echo "Signaturen aktualisiert."
    ;;
  status)
    systemctl is-active clamav-daemon 2>/dev/null && echo "active" || echo "inactive"
    ;;
  *)
    echo "Usage: mailwolt-clamav {install|enable|disable|freshclam|status}" >&2
    exit 1
    ;;
esac