X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fntp%2Ftemplates%2Fntp.conf;h=efa1a646261fafa648164def0c006998fbb52b4d;hb=925bd8c055428c5fa0a4985f5df8ea407d596814;hp=bd14e5894cd998aa547fd13a8c8ae039131989e9;hpb=eb8fbdada437b9a94828a0873f7db82a6ab25c6b;p=mirror%2Fdsa-puppet.git diff --git a/modules/ntp/templates/ntp.conf b/modules/ntp/templates/ntp.conf index bd14e5894..efa1a6462 100644 --- a/modules/ntp/templates/ntp.conf +++ b/modules/ntp/templates/ntp.conf @@ -6,20 +6,11 @@ driftfile /var/lib/ntp/ntp.drift statsdir /var/log/ntpstats/ -# XXX REMOVE wheezy special handling when 670662 gets fixed - -<% if %w{wheezy}.include?(scope.lookupvar('::lsbdistcodename')) -%> -statistics loopstats peerstats clockstats -filegen loopstats file loopstats type day enable -filegen peerstats file peerstats type day enable -filegen clockstats file clockstats type day enable -<% else -%> statistics loopstats peerstats clockstats cryptostats filegen loopstats file loopstats type day enable filegen peerstats file peerstats type day enable filegen clockstats file clockstats type day enable filegen cryptostats file cryptostats type day enable -<% end -%> crypto randfile /dev/urandom keysdir /etc/ntp.keys.d @@ -30,35 +21,29 @@ server 1.debian.pool.ntp.org iburst dynamic server 2.debian.pool.ntp.org iburst dynamic server 3.debian.pool.ntp.org iburst dynamic -leapfile /var/lib/ntp/leap-seconds.list -<% if fqdn == "orff.debian.org" -%> -server ntp.grnet.gr iburst dynamic -server chronos.duth.gr iburst -<% end -%> -<% elsif fqdn == "ancina.debian.org" -%> -server ntp.ugent.be iburst dynamic -<% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] or %w{wheezy}.include?(scope.lookupvar('::lsbdistcodename')) -%> +leapfile /usr/share/zoneinfo/leap-seconds.list +<% elsif scope.lookupvar('site::nodeinfo')['misc']['natted'] -%> # autokey doesn't work behind nat -# merikanto's and orff's ipv4 IP, hard coded for the benefit of hosts -# that do not have RTC's (since they won't be able to do DNS until +# manda-node03's, and bm-bl2's ipv4 IP, hard coded for the benefit of +# hosts that do not have RTC's (since they won't be able to do DNS until # they have a reasonable clock). -server 86.59.118.147 iburst -server 194.177.211.209 iburst +server 82.195.75.69 iburst +server 5.153.231.242 iburst -server merikanto.debian.org iburst -server orff.debian.org iburst -server ravel.debian.org iburst -server busoni.debian.org iburst +server manda-node03.debian.org iburst +server manda-node04.debian.org iburst +server bm-bl1.debian.org iburst +server bm-bl2.debian.org iburst <% else -%> -server merikanto.debian.org iburst autokey -server orff.debian.org iburst autokey -server ravel.debian.org iburst autokey -server busoni.debian.org iburst autokey -restrict merikanto.debian.org notrust nomodify notrap ntpport -restrict orff.debian.org notrust nomodify notrap ntpport -restrict ravel.debian.org notrust nomodify notrap ntpport -restrict busoni.debian.org notrust nomodify notrap ntpport +server manda-node03.debian.org iburst autokey +server manda-node04.debian.org iburst autokey +server bm-bl1.debian.org iburst autokey +server bm-bl2.debian.org iburst autokey +restrict manda-node03.debian.org notrust nomodify notrap ntpport +restrict manda-node04.debian.org notrust nomodify notrap ntpport +restrict bm-bl1.debian.org notrust nomodify notrap ntpport +restrict bm-bl2.debian.org notrust nomodify notrap ntpport <% end -%> restrict -4 default kod notrap nomodify nopeer noquery