Ansible/roles_timesync
1
0
Fork 0
Code Issues 3 Pull requests Releases Wiki Activity

Update ntp.conf.j2

Browse source
This commit is contained in:
Sven Velt 2020-12-03 14:44:52 +01:00
parent 5ae286d0da
commit 160dfceb8d
1 changed files with 16 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
roles/timesync-enabled/templates/etc/ntp.conf.j2
View file

@ -4,8 +4,12 @@
driftfile /var/lib/ntp/ntp.drift driftfile /var/lib/ntp/ntp.drift
# Enable statistics # Leap seconds definition provided by tzdata
leapfile /usr/share/zoneinfo/leap-seconds.list
# Enable statistics if you want statistics to be logged.
statsdir /var/log/ntpstats/ statsdir /var/log/ntpstats/
statistics loopstats peerstats clockstats statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable filegen peerstats file peerstats type day enable
@ -16,14 +20,22 @@ filegen clockstats file clockstats type day enable
{% endfor %} {% endfor %}
# NTP pools # NTP pools
{% for pool in timesync_pools|default([]) %}pool {{ pool }} iburst {% for pool in timesync_pools|default(["0.pool.ntp.org"]) %}pool {{ pool }} iburst
{% endfor %} {% endfor %}
# Access control configuration # Access control configuration
# By default, exchange time with everybody, but don't allow configuration. # By default, exchange time with everybody, but don't allow configuration.
restrict -4 default kod notrap nomodify nopeer noquery restrict -4 default kod notrap nomodify nopeer noquery limited
restrict -6 default kod notrap nomodify nopeer noquery restrict -6 default kod notrap nomodify nopeer noquery limited
# Local users may interrogate the ntp server more closely. # Local users may interrogate the ntp server more closely.
restrict 127.0.0.1 restrict 127.0.0.1
restrict ::1 restrict ::1
restrict -6 ::1
# Needed for adding pool entries
restrict source notrap nomodify noquery
# Allow to query/monitor the daemon
#enable mode7