35 lines
980 B
Text
35 lines
980 B
Text
<% if is_virtual == "true" -%>
|
|
# Don't mind if the virtualized clock appears to be behaving erratically.
|
|
tinker panic 0
|
|
|
|
<% end -%>
|
|
# By default deny everything
|
|
restrict default ignore
|
|
restrict -6 default ignore
|
|
|
|
# Local users may interrogate the ntp server more closely.
|
|
restrict 127.0.0.1
|
|
restrict ::1
|
|
|
|
# Drift file.
|
|
driftfile /var/lib/ntp/ntp.drift
|
|
|
|
# Remote servers.
|
|
<% ntp_server.each do |server| -%>
|
|
restrict <%= server %> mask 255.255.255.255 nomodify notrap noquery
|
|
server <%= server %>
|
|
<% end -%>
|
|
<% if is_virtual == "false" -%>
|
|
|
|
# Undisciplined Local Clock. This is a fake driver intended for backup
|
|
# and when no outside source of synchronized time is available.
|
|
server 127.127.1.0
|
|
fudge 127.127.1.0 stratum 10
|
|
<% end -%>
|
|
<% if has_variable?("ntp_client_networks") -%>
|
|
|
|
# Restrictions for clients using us as source.
|
|
<% ntp_client_networks.each do |net| -%>
|
|
restrict <%= net.split("/")[0] %> mask <%= net.split("/")[1] %> nomodify notrap
|
|
<% end -%>
|
|
<% end -%>
|