ansible-install-server/roles/fai/tasks/time-server.yml

53 lines
1.3 KiB
YAML

- name: configure rdate for inetd
copy:
content: |
time stream tcp nowait root internal
dest: /etc/inetd.conf
owner: root
group: root
mode: u=rw,g=r,o=r
register: inetd_conf
- name: install inetd
package:
name: inetutils-tools
state: present
- name: install ntp server
package:
name: ntp
state: present
- name: configure ntp server
copy:
content: |
driftfile /var/lib/ntp/ntp.drift
leapfile /usr/share/zoneinfo/leap-seconds.list
statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
pool 0.debian.pool.ntp.org iburst
pool 1.debian.pool.ntp.org iburst
pool 2.debian.pool.ntp.org iburst
pool 3.debian.pool.ntp.org iburst
restrict -4 default kod notrap nomodify nopeer noquery limited
restrict -6 default kod notrap nomodify nopeer noquery limited
# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict {{server_net}}.0/24
restrict ::1
restrict source notrap nomodify noquery
dest: /etc/ntp.conf
mode: 0644
owner: root
group: root
register: ntp_conf