X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fntp%2Ftemplates%2Fntp.conf;h=462f8056066757114cb2ecd9012b1b5adcd1b663;hb=0995f61efc833223be6bc85d4e660ce8c0f6eecf;hp=8cc742a613c5c45b012ccc7ceda5b9f8680e238c;hpb=932e58fd8bbf64623ab755cfb4f772526f017209;p=mirror%2Fdsa-puppet.git diff --git a/modules/ntp/templates/ntp.conf b/modules/ntp/templates/ntp.conf index 8cc742a61..462f80560 100644 --- a/modules/ntp/templates/ntp.conf +++ b/modules/ntp/templates/ntp.conf @@ -21,42 +21,29 @@ server 1.debian.pool.ntp.org iburst dynamic server 2.debian.pool.ntp.org iburst dynamic server 3.debian.pool.ntp.org iburst dynamic -leapfile /var/lib/ntp/leap-seconds.list -<% if fqdn == "orff.debian.org" -%> -server ntp.grnet.gr iburst dynamic -server chronos.duth.gr iburst -<% end -%> -<% elsif fqdn == "ancina.debian.org" -%> -server ntp.ugent.be iburst dynamic +leapfile /usr/share/zoneinfo/leap-seconds.list <% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%> # autokey doesn't work behind nat -# czerny's, bm-bl2's, and dijkstra's ipv4 IP, hard coded for the benefit of +# manda-node03's, and bm-bl2's ipv4 IP, hard coded for the benefit of # hosts that do not have RTC's (since they won't be able to do DNS until # they have a reasonable clock). -server 82.195.75.109 iburst -server 5.153.231.242 iburst -server 206.12.19.218 iburst +server 82.195.75.69 iburst +server 5.153.231.242 iburst -server czerny.debian.org iburst -server clementi.debian.org iburst -server bm-bl1.debian.org iburst -server bm-bl2.debian.org iburst -server dijkstra.debian.org iburst -server luchesi.debian.org iburst +server manda-node03.debian.org iburst +server clementi.debian.org iburst +server bm-bl1.debian.org iburst +server bm-bl2.debian.org iburst <% else -%> -server czerny.debian.org iburst autokey -server clementi.debian.org iburst autokey -server bm-bl1.debian.org iburst autokey -server bm-bl2.debian.org iburst autokey -server dijkstra.debian.org iburst autokey -server luchesi.debian.org iburst autokey -restrict czerny.debian.org notrust nomodify notrap ntpport -restrict clementi.debian.org notrust nomodify notrap ntpport -restrict bm-bl1.debian.org notrust nomodify notrap ntpport -restrict bm-bl2.debian.org notrust nomodify notrap ntpport -restrict dijkstra.debian.org notrust nomodify notrap ntpport -restrict luchesi.debian.org notrust nomodify notrap ntpport +server manda-node03.debian.org iburst autokey +server clementi.debian.org iburst autokey +server bm-bl1.debian.org iburst autokey +server bm-bl2.debian.org iburst autokey +restrict manda-node03.debian.org notrust nomodify notrap ntpport +restrict clementi.debian.org notrust nomodify notrap ntpport +restrict bm-bl1.debian.org notrust nomodify notrap ntpport +restrict bm-bl2.debian.org notrust nomodify notrap ntpport <% end -%> restrict -4 default kod notrap nomodify nopeer noquery