ansible-roles/roles/ntp_client/templates/chrony.conf.j2

{% for server in ntp_servers %}
server {{ server }} iburst
{% endfor %}
keyfile {{ ntp_chrony_keyfile }}
driftfile /var/lib/chrony/drift
{% if ansible_virtualization_role == "guest" and ansible_virtualization_type == "kvm" and ntp_ptp_kvm_dev.stat.exists %}
refclock PHC /dev/ptp0 poll 2 trust
{% endif %}
{% if ansible_virtualization_role == "guest" %}
# Virtualization guest, so allow unlimited steps if the clock is more than 15sec off
makestep 15 -1
{% else %}
makestep 1.0 3
{% endif %}
rtcsync
{% if samba_role is defined and samba_role in ['dc','rodc'] %}
# Running Samba DC
ntpsigndsocket /var/lib/samba/ntp_signd
allow all
{% endif %}