diff --git a/hosts/uconsole-cm5/configuration.nix b/hosts/uconsole-cm5/configuration.nix
index 7a9c78a..7fcd883 100644
--- a/hosts/uconsole-cm5/configuration.nix
+++ b/hosts/uconsole-cm5/configuration.nix
@@ -199,4 +199,13 @@
 
   # Enable remote builder (distributed build via lazyworkhorse server)
   services.remoteBuilder.enable = true;
+  # ============================================================
+  # ClamAV antivirus — daily automatic scans
+  # ============================================================
+  services.clamav = {
+    daemon.enable = true;
+    updater.enable = true;
+    scanner.enable = true;
+  };
+
 }