config/puppet-manifests/src/modules/platform/templates/ntp.conf.client.erb

23 lines
698 B
Plaintext

driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict -6 ::1
<%- if scope['platform::ntp::enabled'] == true -%>
# Use orphan mode if external servers are unavailable (or not configured)
tos orphan 12
<%- scope['platform::ntp::servers'].each do |server| -%>
server <%= server %>
<%- end -%>
<%- end -%>