diff options
| author | Sam Chudnick <sam@chudnick.com> | 2023-06-25 09:52:36 -0400 |
|---|---|---|
| committer | Sam Chudnick <sam@chudnick.com> | 2023-06-25 09:52:36 -0400 |
| commit | 95b73daa36b23565a8566f71f9b202d3459b685f (patch) | |
| tree | cb17b021be70e7868d0ec235a761f0ecdc80f3f2 /data/chronyd | |
Diffstat (limited to 'data/chronyd')
| -rw-r--r-- | data/chronyd/chrony.conf | 59 |
1 files changed, 59 insertions, 0 deletions
diff --git a/data/chronyd/chrony.conf b/data/chronyd/chrony.conf new file mode 100644 index 0000000..59d71f6 --- /dev/null +++ b/data/chronyd/chrony.conf | |||
| @@ -0,0 +1,59 @@ | |||
| 1 | # Welcome to the chrony configuration file. See chrony.conf(5) for more | ||
| 2 | # information about usable directives. | ||
| 3 | |||
| 4 | # Include configuration files found in /etc/chrony/conf.d. | ||
| 5 | confdir /etc/chrony/conf.d | ||
| 6 | |||
| 7 | # Use Debian vendor zone. | ||
| 8 | pool 2.debian.pool.ntp.org iburst | ||
| 9 | |||
| 10 | # Use time sources from DHCP. | ||
| 11 | sourcedir /run/chrony-dhcp | ||
| 12 | |||
| 13 | # Use NTP sources found in /etc/chrony/sources.d. | ||
| 14 | sourcedir /etc/chrony/sources.d | ||
| 15 | |||
| 16 | # This directive specify the location of the file containing ID/key pairs for | ||
| 17 | # NTP authentication. | ||
| 18 | keyfile /etc/chrony/chrony.keys | ||
| 19 | |||
| 20 | # This directive specify the file into which chronyd will store the rate | ||
| 21 | # information. | ||
| 22 | driftfile /var/lib/chrony/chrony.drift | ||
| 23 | |||
| 24 | # Save NTS keys and cookies. | ||
| 25 | ntsdumpdir /var/lib/chrony | ||
| 26 | |||
| 27 | # Uncomment the following line to turn logging on. | ||
| 28 | #log tracking measurements statistics | ||
| 29 | |||
| 30 | # Log files location. | ||
| 31 | logdir /var/log/chrony | ||
| 32 | |||
| 33 | # Stop bad estimates upsetting machine clock. | ||
| 34 | maxupdateskew 100.0 | ||
| 35 | |||
| 36 | # This directive enables kernel synchronisation (every 11 minutes) of the | ||
| 37 | # real-time clock. Note that it can’t be used along with the 'rtcfile' directive. | ||
| 38 | rtcsync | ||
| 39 | |||
| 40 | # Step the system clock instead of slewing it if the adjustment is larger than | ||
| 41 | # one second, but only in the first three clock updates. | ||
| 42 | makestep 1 3 | ||
| 43 | |||
| 44 | # Get TAI-UTC offset and leap seconds from the system tz database. | ||
| 45 | # This directive must be commented out when using time sources serving | ||
| 46 | # leap-smeared time. | ||
| 47 | leapsectz right/UTC | ||
| 48 | |||
| 49 | # Allow usage as NTP server from local network | ||
| 50 | allow 192.168.30.0/24 | ||
| 51 | allow 192.168.20.0/24 | ||
| 52 | allow 192.168.10.0/24 | ||
| 53 | allow 127.0.0.1/8 | ||
| 54 | |||
| 55 | # Serve time even if not synchronized to an external time source | ||
| 56 | local stratum 10 | ||
| 57 | |||
| 58 | # Require authentication for NTP sources | ||
| 59 | #authselectmode require | ||
