<% end -%>
# Add additional non-pool NTP servers
# pool.ntp.org can sometimes be aggressive with KoD
-pool time.cloudflare.com iburst maxsources 2
-pool time.google.com iburst maxsources 2
+pool time.cloudflare.com iburst
+pool time.google.com iburst
+
+# Allow local queries for monitoring
+allow 127.0.0.1/32
+allow ::1/128
# Run an initial NTP sync on daemon startup
initstepslew 30 time.cloudflare.com time.google.com <%= node[:ntp][:servers].join(" ") %>
# Enable leap second slew
leapsecmode slew
maxslewrate 1000
+
+# Enable hardware timestamps if available
+hwtimestamp *