diff --git a/group_vars/frigate.yml b/group_vars/frigate.yml
index 81a93e1..bbe15d9 100644
--- a/group_vars/frigate.yml
+++ b/group_vars/frigate.yml
@@ -12,6 +12,9 @@ network_vip_interfaces:
     netmask: 255.255.0.0
     pass: "{{ vip26_pass }}"
 
+chrony_allow:
+  - 172.20.26.0/24
+
 unbound_zones:
   - 26.20.172.in-addr.arpa
   - cam.foo.sh
diff --git a/group_vars/home.yml b/group_vars/home.yml
index 058e247..4f742f4 100644
--- a/group_vars/home.yml
+++ b/group_vars/home.yml
@@ -6,3 +6,4 @@ network_dns_servers:
 ntpd_servers:
   - time1.home.foo.sh
   - time2.home.foo.sh
+chrony_servers: "{{ ntpd_servers }}"
diff --git a/group_vars/iot.yml b/group_vars/iot.yml
index 49adcb8..b2d2a4c 100644
--- a/group_vars/iot.yml
+++ b/group_vars/iot.yml
@@ -6,3 +6,4 @@ network_dns_servers:
 ntpd_servers:
   - time1.iot.foo.sh
   - time2.iot.foo.sh
+chrony_servers: "{{ ntpd_servers }}"
diff --git a/group_vars/lan.yml b/group_vars/lan.yml
index 130adf3..d6d7890 100644
--- a/group_vars/lan.yml
+++ b/group_vars/lan.yml
@@ -6,3 +6,4 @@ network_dns_servers:
 ntpd_servers:
   - time1.lan.foo.sh
   - time2.lan.foo.sh
+chrony_servers: "{{ ntpd_servers }}"
diff --git a/group_vars/nms.yml b/group_vars/nms.yml
index bd86e46..85d3b80 100644
--- a/group_vars/nms.yml
+++ b/group_vars/nms.yml
@@ -2,6 +2,9 @@
 datadisks:
   - {size: 10, type: nvme}
 
+chrony_allow:
+  - 172.20.25.0/24
+
 unbound_zones:
   - 25.20.172.in-addr.arpa
   - oob.foo.sh