2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
6 driftfile /var/lib/ntp/ntp.drift
7 statsdir /var/log/ntpstats/
9 statistics loopstats peerstats clockstats cryptostats
10 filegen loopstats file loopstats type day enable
11 filegen peerstats file peerstats type day enable
12 filegen clockstats file clockstats type day enable
13 filegen cryptostats file cryptostats type day enable
15 crypto randfile /dev/urandom
16 keysdir /etc/ntp.keys.d
18 <% if scope.lookupvar('site::nodeinfo')['timeserver'] -%>
19 server 0.debian.pool.ntp.org iburst dynamic
20 server 1.debian.pool.ntp.org iburst dynamic
21 server 2.debian.pool.ntp.org iburst dynamic
22 server 3.debian.pool.ntp.org iburst dynamic
24 leapfile /var/lib/ntp/leap-seconds.list
25 <% elsif fqdn == "ancina.debian.org" -%>
26 server ntp.ugent.be iburst dynamic
27 <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%>
28 # autokey doesn't work behind nat
30 # czerny's, bm-bl2's, and dijkstra's ipv4 IP, hard coded for the benefit of
31 # hosts that do not have RTC's (since they won't be able to do DNS until
32 # they have a reasonable clock).
33 server 82.195.75.109 iburst
34 server 5.153.231.242 iburst
35 server 206.12.19.218 iburst
37 server czerny.debian.org iburst
38 server clementi.debian.org iburst
39 server bm-bl1.debian.org iburst
40 server bm-bl2.debian.org iburst
41 server dijkstra.debian.org iburst
42 server luchesi.debian.org iburst
44 server czerny.debian.org iburst autokey
45 server clementi.debian.org iburst autokey
46 server bm-bl1.debian.org iburst autokey
47 server bm-bl2.debian.org iburst autokey
48 server dijkstra.debian.org iburst autokey
49 server luchesi.debian.org iburst autokey
50 restrict czerny.debian.org notrust nomodify notrap ntpport
51 restrict clementi.debian.org notrust nomodify notrap ntpport
52 restrict bm-bl1.debian.org notrust nomodify notrap ntpport
53 restrict bm-bl2.debian.org notrust nomodify notrap ntpport
54 restrict dijkstra.debian.org notrust nomodify notrap ntpport
55 restrict luchesi.debian.org notrust nomodify notrap ntpport
58 restrict -4 default kod notrap nomodify nopeer noquery
59 restrict -6 default kod notrap nomodify nopeer noquery
66 # vim:set shiftwidth=4: