36 lines
974 B
Text
36 lines
974 B
Text
<% if @is_virtual == "true" -%>
|
|
# Don't mind if the virtualized clock appears to be behaving erratically.
|
|
tinker panic 0
|
|
|
|
<% end -%>
|
|
# By default deny everything.
|
|
restrict -4 default ignore
|
|
restrict -6 default ignore
|
|
|
|
# Local users may interrogate the ntp server more closely.
|
|
restrict 127.0.0.1
|
|
restrict ::1
|
|
|
|
# Drift file.
|
|
driftfile /var/lib/ntp/ntp.drift
|
|
|
|
# Remote servers.
|
|
<% @ntp_server.each do |server| -%>
|
|
server <%= server %>
|
|
restrict <%= server %> nomodify notrap nopeer noquery
|
|
<% end -%>
|
|
<% if @is_virtual == "false" -%>
|
|
|
|
# Undisciplined Local Clock. This is a fake driver intended for backup
|
|
# and when no outside source of synchronized time is available.
|
|
server 127.127.1.0
|
|
fudge 127.127.1.0 stratum 10
|
|
<% end -%>
|
|
<% if @ntp_client_networks -%>
|
|
|
|
# Restrictions for clients using us as source.
|
|
<% @ntp_client_networks.each do |net| -%>
|
|
<% addr, mask = net.split("/") -%>
|
|
restrict <%= addr %> mask <%= mask %> nomodify notrap nopeer
|
|
<% end -%>
|
|
<% end -%>
|