diff --git a/roles/ntpd/templates/ntpd.conf.j2 b/roles/ntpd/templates/ntpd.conf.j2
index 8802991..a1191f3 100644
--- a/roles/ntpd/templates/ntpd.conf.j2
+++ b/roles/ntpd/templates/ntpd.conf.j2
@@ -4,6 +4,15 @@
 listen on {{ listen }}
 {%   endfor %}
 
+{% endif %}
+{% if ntpd_constraints is defined %}
+# constraints
+constraint from {% for constraint in ntpd_constraints -%}
+{{ '"' + constraint + '"' -}}
+{{ ', ' if not loop.last -}}
+{%   endfor %}
+
+
 {% endif %}
 # remote servers
 {% for server in ntpd_servers %}