ntp.conf

#more logging in logfile
#_logconfig =all

driftfile /var/lib/ntp/ntp.drift
#_logfile        {{ DIR_NTP_LOG }}
ntpsigndsocket  {{ DIR_NTP_SOCK }}

# Leap seconds definition provided by tzdata
leapfile /usr/share/zoneinfo/leap-seconds.list

# Enable this if you want statistics to be logged.
statsdir {{ DIR_NTP_STATS }}
 
# Where to retrieve the time from
{{ NTPSERVER }}

# Access control
# Default restriction: Disallow everything
#restrict default ignore

# No restrictions for localhost
restrict 127.0.0.1
restrict -6 ::1

# Access control
# Default restriction: Allow clients only to query the time
restrict -4 default kod limited nomodify notrap nopeer mssntp
restrict -6 default kod limited nomodify notrap nopeer mssntp

# Enable the time sources only to only provide time to this host
#
{{ NTPSERVERRESTRICT }}

tinker panic 0