Home Explore Help
Sign In
ffdo-infrastruktur
/
ffdo-ansible
mirror of https://github.com/ffdo/ffdo-ansible.git
5
0
Fork 0
Files
Tree: 7c2a710494
Branches Tags
ffdo-ansible
/
roles
/
ff-supernode
/
templates
/
ntp.conf.j2

ntp.conf.j2 2.4 KB
History Raw

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071 
  1. # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
    2. 

  2. 

  3. #
    4. 

  4. # This file is managed by ansible. Do not edit by hand!
    5. 

  5. #
    6. 

  6. 

  7. driftfile /var/lib/ntp/ntp.drift
    8. 

  8. 

  9. 

  10. # listen on if
    11. 

  11. interface ignore wildcard
    12. 

  12. interface listen bat0
    13. 

  13. interface listen eth0
    14. 

  14. 

  15. # Enable this if you want statistics to be logged.
    16. 

  16. #statsdir /var/log/ntpstats/
    17. 

  17. 

  18. statistics loopstats peerstats clockstats
    19. 

  19. filegen loopstats file loopstats type day enable
    20. 

  20. filegen peerstats file peerstats type day enable
    21. 

  21. filegen clockstats file clockstats type day enable
    22. 

  22. 

  23. 

  24. # You do need to talk to an NTP server or two (or three).
    25. 

  25. #server ntp.your-provider.example
    26. 

  26. 

  27. # pool.ntp.org maps to about 1000 low-stratum NTP servers.  Your server will
    28. 

  28. # pick a different set every time it starts up.  Please consider joining the
    29. 

  29. # pool: <http://www.pool.ntp.org/join.html>
    30. 

  30. server 0.debian.pool.ntp.org iburst
    31. 

  31. server 1.debian.pool.ntp.org iburst
    32. 

  32. server 2.debian.pool.ntp.org iburst
    33. 

  33. server 3.debian.pool.ntp.org iburst
    34. 

  34. 

  35. 

  36. # Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
    37. 

  37. # details.  The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
    38. 

  38. # might also be helpful.
    39. 

  39. #
    40. 

  40. # Note that "restrict" applies to both servers and clients, so a configuration
    41. 

  41. # that might be intended to block requests from certain clients could also end
    42. 

  42. # up blocking replies from your own upstream servers.
    43. 

  43. 

  44. # By default, exchange time with everybody, but don't allow configuration.
    45. 

  45. # restrict -4 default kod notrap nomodify nopeer noquery
    46. 

  46. # restrict -6 default kod notrap nomodify nopeer noquery
    47. 

  47. restrict -4 default ignore
    48. 

  48. restrict -6 default ignore
    49. 

  49. 

  50. 

  51. # Local users may interrogate the ntp server more closely.
    52. 

  52. restrict 127.0.0.1
    53. 

  53. restrict ::1
    54. 

  54. 

  55. # allow from ff-do-subnets
    56. 

  56. restrict {{supernode_mesh_ipv4|ipaddr('network')}} mask {{supernode_mesh_ipv4|ipaddr('netmask')}} kod notrap nomodify nopeer noquery
    57. 

  57. restrict {{supernode_mesh_ipv6|ipaddr('network')}} mask {{supernode_mesh_ipv6|ipaddr('netmask')}} kod notrap nomodify nopeer noquery
    58. 

  58. 

  59. # Clients from this (example!) subnet have unlimited access, but only if
    60. 

  60. # cryptographically authenticated.
    61. 

  61. #restrict 192.168.123.0 mask 255.255.255.0 notrust
    62. 

  62. 

  63. 

  64. # If you want to provide time to your local subnet, change the next line.
    65. 

  65. # (Again, the address is an example only.)
    66. 

  66. #broadcast 192.168.123.255
    67. 

  67. 

  68. # If you want to listen to time broadcasts on your local subnet, de-comment the
    69. 

  69. # next lines.  Please do this only if you trust everybody on the network!
    70. 

  70. #disable auth
    71. 

  71. #broadcastclient
    72.