ansible/roles/mail/files/rspamd/local.d/antivirus.conf

clamav {
    servers = "/var/run/clamav/clamd.ctl";
    symbol = "CLAMAV_VIRUS";
    attachments_only = false;
    patterns {
        JUST_EICAR = nan; #Disable EICAR handling
    }
    action = "reject";
}