2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
6 driftfile /var/lib/ntp/ntp.drift
7 statsdir /var/log/ntpstats/
9 # XXX REMOVE wheezy special handling when 670662 gets fixed
11 <% if %w{wheezy}.include?(scope.lookupvar('::lsbdistcodename')) -%>
12 statistics loopstats peerstats clockstats
13 filegen loopstats file loopstats type day enable
14 filegen peerstats file peerstats type day enable
15 filegen clockstats file clockstats type day enable
17 statistics loopstats peerstats clockstats cryptostats
18 filegen loopstats file loopstats type day enable
19 filegen peerstats file peerstats type day enable
20 filegen clockstats file clockstats type day enable
21 filegen cryptostats file cryptostats type day enable
24 crypto randfile /dev/urandom
25 keysdir /etc/ntp.keys.d
27 <% if scope.lookupvar('site::nodeinfo')['timeserver'] -%>
28 server 0.debian.pool.ntp.org iburst dynamic
29 server 1.debian.pool.ntp.org iburst dynamic
30 server 2.debian.pool.ntp.org iburst dynamic
31 server 3.debian.pool.ntp.org iburst dynamic
33 leapfile /var/lib/ntp/leap-seconds.list
34 <% if fqdn == "orff.debian.org" -%>
35 server ntp.grnet.gr iburst dynamic
36 server chronos.duth.gr iburst
38 <% elsif fqdn == "ancina.debian.org" -%>
39 server ntp.ugent.be iburst dynamic
40 <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] or %w{wheezy}.include?(scope.lookupvar('::lsbdistcodename')) -%>
41 # autokey doesn't work behind nat
43 # merikanto's and orff's ipv4 IP, hard coded for the benefit of hosts
44 # that do not have RTC's (since they won't be able to do DNS until
45 # they have a reasonable clock).
46 server 86.59.118.147 iburst
47 server 194.177.211.209 iburst
49 server merikanto.debian.org iburst
50 server orff.debian.org iburst
51 server ravel.debian.org iburst
52 server busoni.debian.org iburst
54 server merikanto.debian.org iburst autokey
55 server orff.debian.org iburst autokey
56 server ravel.debian.org iburst autokey
57 server busoni.debian.org iburst autokey
58 restrict merikanto.debian.org notrust nomodify notrap ntpport
59 restrict orff.debian.org notrust nomodify notrap ntpport
60 restrict ravel.debian.org notrust nomodify notrap ntpport
61 restrict busoni.debian.org notrust nomodify notrap ntpport
64 restrict -4 default kod notrap nomodify nopeer noquery
65 restrict -6 default kod notrap nomodify nopeer noquery
72 # vim:set shiftwidth=4: