ansible.infra.services/roles/ntp_server/templates/chrony.conf.j2

#################################################################
# File: chrony.conf
# Generated by: Ansible
#################################################################
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
{% for server in pools %}
server {{ server }} iburst
{% endfor %}

# -- CLIENT NETWORK -------
# Permit systems on this network to synchronize with this
# time service.  Do not permit those systems to modify the
# configuration of this service.  Also, do not use those
# systems as peers for synchronization.
{% for subnet in allowed_subnets %}
allow {{ (subnet.net + '/' + subnet.mask) | ipaddr('net') }}
{% endfor %}

#
# Drift file.  Put this in a directory which the daemon can write to.
# No symbolic links allowed, either, since the daemon updates the file
# by creating a temporary in the same directory and then rename()ing
# it to the file.
# Record the rate at which the system clock gains/losses time.# Record the rate at which the system clock gains/losses time.
#
driftfile {{ driftfile }}

# Allow the system clock to be stepped in the first three updates
# if its offset is larger than 1 second.
makestep 1.0 3
# Enable kernel synchronization of the real-time clock (RTC).
rtcsync

# Enable hardware timestamping on all interfaces that support it.
#hwtimestamp *

# Increase the minimum number of selectable sources required to adjust
# the system clock.
#minsources 2

# Serve time even if not synchronized to a time source.
#local stratum 10

#
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
#
{% if keyfile is defined %}
keyfile {{ keyfile }}
{% endif %}

# Specify directory for log files.
logdir {{ logfile | dirname}}

# Select which information is logged.
#log measurements statistics tracking