# Note: The general recommendation for an NTP client is to have at least # three NTP servers to be able to detect one server providing incorrect # time (falseticker). # Use four public NTP servers from the pool.ntp.org project. If this # host has a static public IP address, please consider joining the pool: # https://www.ntppool.org/join.html pool pool.ntp.org iburst # Record the rate at which the system clock gains/losses time. driftfile /var/lib/chrony/drift # Allow the system clock to be stepped in the first three updates # if its offset is larger than 1 second. makestep 1.0 3 # Enable kernel synchronization of the real-time clock (RTC). rtcsync # Enable hardware timestamping on all interfaces that support it. #hwtimestamp * # Increase the minimum number of selectable sources required to adjust # the system clock. #minsources 2 # Allow NTP client access from local network. #allow 192.168.0.0/16 # Serve time even if not synchronized to a time source. #local stratum 10 # Require authentication (nts or key option) for all NTP sources. #authselectmode require # Specify file containing keys for NTP authentication. #keyfile /etc/chrony.keys # Save NTS keys and cookies. ntsdumpdir /var/lib/chrony # Insert/delete leap seconds by slewing instead of stepping. #leapsecmode slew # Set the TAI-UTC offset of the system clock. #leapseclist /usr/share/zoneinfo/leap-seconds.list # Specify directory for log files. logdir /var/log/chrony # Select which information is logged. #log measurements statistics tracking