mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
42 lines
1.2 KiB
Django/Jinja
42 lines
1.2 KiB
Django/Jinja
{{ ansible_managed | comment }}
|
|
|
|
# Use public servers from the pool.ntp.org project.
|
|
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
|
|
{% for server in rhel9cis_time_synchronization_servers -%}
|
|
server {{ server }} {{ rhel9cis_chrony_server_options }}
|
|
{% endfor %}
|
|
|
|
# Record the rate at which the system clock gains/losses time.
|
|
driftfile /var/lib/chrony/drift
|
|
|
|
# Allow the system clock to be stepped in the first three updates
|
|
# if its offset is larger than 1 second.
|
|
makestep 1.0 3
|
|
|
|
# Enable kernel synchronization of the real-time clock (RTC).
|
|
rtcsync
|
|
|
|
# Enable hardware timestamping on all interfaces that support it.
|
|
#hwtimestamp *
|
|
|
|
# Increase the minimum number of selectable sources required to adjust
|
|
# the system clock.
|
|
#minsources 2
|
|
|
|
# Allow NTP client access from local network.
|
|
#allow 192.168.0.0/16
|
|
|
|
# Serve time even if not synchronized to a time source.
|
|
#local stratum 10
|
|
|
|
# Specify file containing keys for NTP authentication.
|
|
keyfile /etc/chrony.keys
|
|
|
|
# Get TAI-UTC offset and leap seconds from the system tz database.
|
|
leapsectz right/UTC
|
|
|
|
# Specify directory for log files.
|
|
logdir /var/log/chrony
|
|
|
|
# Select which information is logged.
|
|
#log measurements statistics tracking
|