# Servers
<% node[:ntp][:servers].each do |server| -%>
pool <%= server %> iburst
<% end -%>
# Add additional non-pool NTP servers
# pool.ntp.org can sometimes be aggressive with KoD
# Servers
<% node[:ntp][:servers].each do |server| -%>
pool <%= server %> iburst
<% end -%>
# Add additional non-pool NTP servers
# pool.ntp.org can sometimes be aggressive with KoD
-pool time.cloudflare.com iburst maxsources 2
-pool time.google.com iburst maxsources 2
+pool time.cloudflare.com iburst
+pool time.google.com iburst
+
+# Allow local queries for monitoring
+allow 127.0.0.1/32
+allow ::1/128
# Run an initial NTP sync on daemon startup
initstepslew 30 time.cloudflare.com time.google.com <%= node[:ntp][:servers].join(" ") %>
# Run an initial NTP sync on daemon startup
initstepslew 30 time.cloudflare.com time.google.com <%= node[:ntp][:servers].join(" ") %>
# This directive specify the location of the file containing ID/key pairs for
# NTP authentication.
keyfile /etc/chrony/chrony.keys
# This directive specify the location of the file containing ID/key pairs for
# NTP authentication.
keyfile /etc/chrony/chrony.keys