# By default, exchange time with everybody, but don't allow configuration.
restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery

# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict ::1

# Drift file.
driftfile /var/lib/ntp/ntp.drift

# Remote servers.
<% ntp_server.each do |server| -%>
server <%= server %>
<% end -%>

# Undisciplined Local Clock. This is a fake driver intended for backup
# and when no outside source of synchronized time is available.
server 127.127.1.0
fudge  127.127.1.0 stratum 10