# Chrony configuration template
# Generated by Ansible on {{ ansible_date_time.iso8601 }}
# Host: {{ inventory_hostname }}
# NTP Server Configuration
{% if ntp_server_pool is defined %}
pool {{ ntp_server_pool }} iburst
{% else %}
pool pool.ntp.org iburst
{% endif %}
# Additional reliable NTP servers
pool 0.pool.ntp.org iburst
pool 1.pool.ntp.org iburst
pool 2.pool.ntp.org iburst
# Local stratum 10 server for isolation
server 127.127.1.0 stratum 10
# Record the rate at which the system clock gains/losses time
driftfile /var/lib/chrony/drift
# Allow the system clock to be stepped in the first three updates
# if its offset is larger than 1 second
makestep 1.0 3
# Enable kernel synchronization of the real-time clock (RTC)
rtcsync
# Enable hardware timestamping on all interfaces that support it
#hwtimestamp *
# Increase the minimum number of selectable sources required to adjust
# the system clock
minsources 2
# Allow NTP client access from local network
{% if ansible_default_ipv4.network is defined %}
allow {{ ansible_default_ipv4.network }}/{{ ansible_default_ipv4.netmask }}
{% endif %}
allow 127.0.0.1
# Serve time even if not synchronized to a time source
local stratum 10
# Specify file containing keys for NTP authentication
keyfile /etc/chrony.keys
# Get TAI-UTC offset and leap seconds from the system tz database
leapsectz right/UTC
# Specify directory for log files
logdir /var/log/chrony
# Select which information is logged
#log measurements statistics tracking