I've been tinkering with self hosted appwrite for the past few days, and tonight I went down the rabbit hole of the antivirus scanning. It seemed like just changing the docker-compose image to use clamav/clamav:1.3.2-71 (amd64 only) allowed it to work.
When I tried uploading a normal file it went through, and when I tried uploading the eicar.txt test file I can see in the clamav logs it properly flagged it and the upload was blocked with a 403 response. However, when I switched from local based storage to s3 storage it seems like even though Antivirus is enabled on the Appwrite bucket, it skips the step and allows the "bad" file through.
It seems like there hasn't been much done as the last clamav related post was from 2023, and in https://appwrite.io/docs/products/storage/buckets it makes no mention of antivirus settings at all so my question are, is this a feature that's going to be deprecated? Would I be better off having a custom virus scan flow sits in front of any uploads? Or is it just something that is very much on the back burner?
Thanks!
Recommended threads
- TablesDB `updateRows` returns `database_...
Hi Appwrite team! I’m seeing a strange issue with TablesDB bulk row updates on a self-hosted Appwrite instance. **Environment** - Appwrite self-hosted `1.9.0` ...
- [SOLVED] Realtime Missing Channels
```js useEffect(() => { let subscription: RealtimeSubscription; async function loadChips() { try { const {rows: chi...
- Functions executed by events does not ap...
Hello, Running self-hosted Appwrite version 1.9.0 (with console 7.8.26). When functions are triggered by an event (eg. databases.\*tables.\*.rows.\*.create) doe...