2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
6 driftfile /var/lib/ntp/ntp.drift
7 statsdir /var/log/ntpstats/
9 <% if %w{wheezy}.include?(scope.lookupvar('::lsbdistcodename')) -%>
10 statistics loopstats peerstats clockstats
11 filegen loopstats file loopstats type day enable
12 filegen peerstats file peerstats type day enable
13 filegen clockstats file clockstats type day enable
15 statistics loopstats peerstats clockstats cryptostats
16 filegen loopstats file loopstats type day enable
17 filegen peerstats file peerstats type day enable
18 filegen clockstats file clockstats type day enable
19 filegen cryptostats file cryptostats type day enable
22 crypto randfile /dev/urandom
23 keysdir /etc/ntp.keys.d
25 <% if scope.lookupvar('site::nodeinfo')['timeserver'] -%>
26 server 0.debian.pool.ntp.org iburst dynamic
27 server 1.debian.pool.ntp.org iburst dynamic
28 server 2.debian.pool.ntp.org iburst dynamic
29 server 3.debian.pool.ntp.org iburst dynamic
31 leapfile /var/lib/ntp/leap-seconds.list
32 <% if fqdn == "orff.debian.org" -%>
33 server ntp.grnet.gr iburst dynamic
34 server chronos.duth.gr iburst
36 <% elsif fqdn == "ancina.debian.org" -%>
37 server ntp.ugent.be iburst dynamic
38 <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%>
39 # autokey doesn't work behind nat
41 # merikanto's and orff's ipv4 IP, hard coded for the benefit of hosts
42 # that do not have RTC's (since they won't be able to do DNS until
43 # they have a reasonable clock).
44 server 86.59.118.147 iburst
45 server 194.177.211.209 iburst
47 server merikanto.debian.org iburst
48 server orff.debian.org iburst
49 server ravel.debian.org iburst
50 server busoni.debian.org iburst
52 server merikanto.debian.org iburst autokey
53 server orff.debian.org iburst autokey
54 server ravel.debian.org iburst autokey
55 server busoni.debian.org iburst autokey
56 restrict merikanto.debian.org notrust nomodify notrap ntpport
57 restrict orff.debian.org notrust nomodify notrap ntpport
58 restrict ravel.debian.org notrust nomodify notrap ntpport
59 restrict busoni.debian.org notrust nomodify notrap ntpport
62 restrict -4 default kod notrap nomodify nopeer noquery
63 restrict -6 default kod notrap nomodify nopeer noquery
70 # vim:set shiftwidth=4: