2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
6 driftfile /var/lib/ntp/ntp.drift
7 statsdir /var/log/ntpstats/
9 statistics loopstats peerstats clockstats cryptostats
10 filegen loopstats file loopstats type day enable
11 filegen peerstats file peerstats type day enable
12 filegen clockstats file clockstats type day enable
13 filegen cryptostats file cryptostats type day enable
15 crypto randfile /dev/urandom
16 keysdir /etc/ntp.keys.d
18 <% if scope.lookupvar('site::nodeinfo')['timeserver'] -%>
19 server 0.debian.pool.ntp.org iburst dynamic
20 server 1.debian.pool.ntp.org iburst dynamic
21 server 2.debian.pool.ntp.org iburst dynamic
22 server 3.debian.pool.ntp.org iburst dynamic
24 leapfile /var/lib/ntp/leap-seconds.list
25 <% if fqdn == "orff.debian.org" -%>
26 server ntp.grnet.gr iburst dynamic
27 server chronos.duth.gr iburst
29 <% elsif fqdn == "ancina.debian.org" -%>
30 server ntp.ugent.be iburst dynamic
31 <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%>
32 # autokey doesn't work behind nat
34 # merikanto's and orff's ipv4 IP, hard coded for the benefit of hosts
35 # that do not have RTC's (since they won't be able to do DNS until
36 # they have a reasonable clock).
37 server 86.59.118.147 iburst
38 server 194.177.211.209 iburst
40 server czerny.debian.org iburst
41 server merikanto.debian.org iburst
42 server orff.debian.org iburst
43 server ravel.debian.org iburst
44 server busoni.debian.org iburst
46 server czerny.debian.org iburst autokey
47 server merikanto.debian.org iburst autokey
48 server orff.debian.org iburst autokey
49 server ravel.debian.org iburst autokey
50 server busoni.debian.org iburst autokey
51 restrict czerny.debian.org notrust nomodify notrap ntpport
52 restrict merikanto.debian.org notrust nomodify notrap ntpport
53 restrict orff.debian.org notrust nomodify notrap ntpport
54 restrict ravel.debian.org notrust nomodify notrap ntpport
55 restrict busoni.debian.org notrust nomodify notrap ntpport
58 restrict -4 default kod notrap nomodify nopeer noquery
59 restrict -6 default kod notrap nomodify nopeer noquery
66 # vim:set shiftwidth=4: