2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
6 driftfile /var/lib/ntp/ntp.drift
7 statsdir /var/log/ntpstats/
9 statistics loopstats peerstats clockstats cryptostats
10 filegen loopstats file loopstats type day enable
11 filegen peerstats file peerstats type day enable
12 filegen clockstats file clockstats type day enable
13 filegen cryptostats file cryptostats type day enable
15 crypto randfile /dev/urandom
16 keysdir /etc/ntp.keys.d
18 <% if scope.lookupvar('site::nodeinfo')['timeserver'] -%>
19 server 0.debian.pool.ntp.org iburst dynamic
20 server 1.debian.pool.ntp.org iburst dynamic
21 server 2.debian.pool.ntp.org iburst dynamic
22 server 3.debian.pool.ntp.org iburst dynamic
24 <% if @lsbmajdistrelease >= '8' -%>
25 leapfile /usr/share/zoneinfo/leap-seconds.list
27 leapfile /var/lib/ntp/leap-seconds.list
29 <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%>
30 # autokey doesn't work behind nat
32 # czerny's, bm-bl2's, and ubc-bl2's ipv4 IP, hard coded for the benefit of
33 # hosts that do not have RTC's (since they won't be able to do DNS until
34 # they have a reasonable clock).
35 server 82.195.75.109 iburst
36 server 5.153.231.242 iburst
37 server 206.12.19.212 iburst
39 server czerny.debian.org iburst
40 server clementi.debian.org iburst
41 server bm-bl1.debian.org iburst
42 server bm-bl2.debian.org iburst
43 server ubc-bl2.debian.org iburst
44 server ubc-bl6.debian.org iburst
46 server czerny.debian.org iburst autokey
47 server clementi.debian.org iburst autokey
48 server bm-bl1.debian.org iburst autokey
49 server bm-bl2.debian.org iburst autokey
50 server ubc-bl2.debian.org iburst autokey
51 server ubc-bl6.debian.org iburst autokey
52 restrict czerny.debian.org notrust nomodify notrap ntpport
53 restrict clementi.debian.org notrust nomodify notrap ntpport
54 restrict bm-bl1.debian.org notrust nomodify notrap ntpport
55 restrict bm-bl2.debian.org notrust nomodify notrap ntpport
56 restrict ubc-bl2.debian.org notrust nomodify notrap ntpport
57 restrict ubc-bl6.debian.org notrust nomodify notrap ntpport
60 restrict -4 default kod notrap nomodify nopeer noquery
61 restrict -6 default kod notrap nomodify nopeer noquery
68 # vim:set shiftwidth=4: