# KESL 12 autoinstall — offline on-demand scanner profile.
# Required fields per support.kaspersky.com/kes-for-linux/12.3.0/197593
EULA_AGREED=Yes
PRIVACY_POLICY_AGREED=Yes
USE_KSN=No
GROUP_CLEAN=No

# Locale + updater source: pull fresh sigs from KLServers at build time.
# LOCALE must be RFC 3066 with charset suffix (en_US alone is rejected).
LOCALE=en_US.utf8
UPDATER_SOURCE=KLServers
PROXY_SERVER=None

# Bake databases into the image so the container is offline-capable.
UPDATE_EXECUTE=Yes

# No kernel module / no GUI / no SELinux — we run on-demand scans only.
KERNEL_SRCS_INSTALL=No
USE_GUI=No
CONFIGURE_SELINUX=No

# RTP is unused but keep fanotify default for sanity.
INTERCEPTOR_MODE=UseFanotify
INTERCEPTOR_FALLBACK_STRATEGY=FallbackToFanotify