install.sh — installs malware-watch, abuse.ch feeds, automatic quarantine, IOC firewall blocking, and optional official ClamAV.
.env — private Discord Webhook / abuse.ch Auth-Key and tuning values.

Install:

cd /app/malware-watch
sudo ./install.sh

Useful logs:

journalctl -u malware-watch.service -f
journalctl -u malware-feed-update.service
journalctl -u clamav-risk-scan.service
journalctl -u clamav-deep-scan.service
journalctl -u clamav-freshclam-local.service

The .env file is mode 600 and is ignored by Git.