2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
6 driftfile /var/lib/ntp/ntp.drift
7 statsdir /var/log/ntpstats/
9 statistics loopstats peerstats clockstats
10 filegen loopstats file loopstats type day enable
11 filegen peerstats file peerstats type day enable
12 filegen clockstats file clockstats type day enable
14 crypto randfile /dev/urandom
15 keysdir /etc/ntp.keys.d
17 <% if scope.lookupvar('site::nodeinfo')['timeserver'] -%>
18 server 0.debian.pool.ntp.org iburst dynamic
19 server 1.debian.pool.ntp.org iburst dynamic
20 server 2.debian.pool.ntp.org iburst dynamic
21 server 3.debian.pool.ntp.org iburst dynamic
23 leapfile /var/lib/ntp/leap-seconds.list
24 <% if fqdn == "orff.debian.org" -%>
25 server ntp.grnet.gr iburst
27 <% elsif fqdn == "ancina.debian.org" -%>
28 server ntp.ugent.be iburst dynamic
29 <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%>
30 # autokey doesn't work behind nat
32 # merikanto's and orff's ipv4 IP, hard coded for the benefit of hosts
33 # that do not have RTC's (since they won't be able to do DNS until
34 # they have a reasonable clock).
35 server 86.59.118.147 iburst
36 server 194.177.211.209 iburst
38 server merikanto.debian.org iburst
39 server orff.debian.org iburst
40 server ravel.debian.org iburst
41 server busoni.debian.org iburst
43 server merikanto.debian.org iburst autokey
44 server orff.debian.org iburst autokey
45 server ravel.debian.org iburst autokey
46 server busoni.debian.org iburst autokey
47 restrict merikanto.debian.org notrust nomodify notrap ntpport
48 restrict orff.debian.org notrust nomodify notrap ntpport
49 restrict ravel.debian.org notrust nomodify notrap ntpport
50 restrict busoni.debian.org notrust nomodify notrap ntpport
53 restrict -4 default kod notrap nomodify nopeer noquery
54 restrict -6 default kod notrap nomodify nopeer noquery
61 # vim:set shiftwidth=4: