daniel/dotfiles
1
0
Fork 0
Code Activity Actions

chrony: more servers

Browse source
This commit is contained in:
Daniel Kempkens 2024-01-29 10:25:53 +01:00
parent ca3a873e94
commit 2b9a27d92e
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
2 changed files with 11 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
system/hosts/argon.nix
View file

@ -23,6 +23,8 @@ in
../nixos/attic.nix ../nixos/attic.nix
../nixos/chrony.nix
(import ../nixos/forgejo-runner.nix (args // { name = "argon"; tag = "ubuntu-latest-arm64"; nixTag = "arm64"; })) (import ../nixos/forgejo-runner.nix (args // { name = "argon"; tag = "ubuntu-latest-arm64"; nixTag = "arm64"; }))
../nixos/grafana.nix ../nixos/grafana.nix

14
system/nixos/chrony.nix
View file

@ -7,8 +7,14 @@
servers = [ servers = [
"ptbtime1.ptb.de" "ptbtime1.ptb.de"
"ptbtime2.ptb.de" "ptbtime2.ptb.de"
"time.cloudflare.com" "ptbtime3.ptb.de"
"ntp1.rwth-aachen.de"
"ntp2.rwth-aachen.de"
"ntp3.rwth-aachen.de"
"ntp1.hetzner.de" "ntp1.hetzner.de"
"ntp2.hetzner.de"
"ntp3.hetzner.de"
"time.cloudflare.com"
]; ];
extraConfig = '' extraConfig = ''
@ -18,11 +24,9 @@
''; '';
}; };
systemd.services.chronyd = { services.timesyncd.enable = lib.mkForce false;
after = lib.mkForce [ "network-online.target" "nss-lookup.target" ];
};
networking.firewall.interfaces."end0" = { networking.firewall = {
allowedUDPPorts = [ 123 ]; allowedUDPPorts = [ 123 ];
allowedTCPPorts = [ 123 ]; allowedTCPPorts = [ 123 ];
}; };