2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
6 driftfile /var/lib/ntp/ntp.drift
7 statsdir /var/log/ntpstats/
9 statistics loopstats peerstats clockstats cryptostats
10 filegen loopstats file loopstats type day enable
11 filegen peerstats file peerstats type day enable
12 filegen clockstats file clockstats type day enable
13 filegen cryptostats file cryptostats type day enable
15 crypto randfile /dev/urandom
16 keysdir /etc/ntp.keys.d
18 <% if scope.lookupvar('site::nodeinfo')['timeserver'] -%>
19 server 0.debian.pool.ntp.org iburst dynamic
20 server 1.debian.pool.ntp.org iburst dynamic
21 server 2.debian.pool.ntp.org iburst dynamic
22 server 3.debian.pool.ntp.org iburst dynamic
24 leapfile /var/lib/ntp/leap-seconds.list
25 <% if fqdn == "orff.debian.org" -%>
26 server ntp.grnet.gr iburst dynamic
27 server chronos.duth.gr iburst
29 <% elsif fqdn == "ancina.debian.org" -%>
30 server ntp.ugent.be iburst dynamic
31 <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%>
32 # autokey doesn't work behind nat
34 # czerny's, bm-bl2's, and dijkstra's ipv4 IP, hard coded for the benefit of
35 # hosts that do not have RTC's (since they won't be able to do DNS until
36 # they have a reasonable clock).
37 server 82.195.75.109 iburst
38 server 5.153.231.242 iburst
39 server 206.12.19.218 iburst
41 server czerny.debian.org iburst
42 server clementi.debian.org iburst
43 server bm-bl1.debian.org iburst
44 server bm-bl2.debian.org iburst
45 server dijkstra.debian.org iburst
46 server luchesi.debian.org iburst
48 server czerny.debian.org iburst autokey
49 server clementi.debian.org iburst autokey
50 server bm-bl1.debian.org iburst autokey
51 server bm-bl2.debian.org iburst autokey
52 server dijkstra.debian.org iburst autokey
53 server luchesi.debian.org iburst autokey
54 restrict czerny.debian.org notrust nomodify notrap ntpport
55 restrict clementi.debian.org notrust nomodify notrap ntpport
56 restrict bm-bl1.debian.org notrust nomodify notrap ntpport
57 restrict bm-bl2.debian.org notrust nomodify notrap ntpport
58 restrict dijkstra.debian.org notrust nomodify notrap ntpport
59 restrict luchesi.debian.org notrust nomodify notrap ntpport
62 restrict -4 default kod notrap nomodify nopeer noquery
63 restrict -6 default kod notrap nomodify nopeer noquery
70 # vim:set shiftwidth=4: