# NTP servers to sync to.
server gw.afterdark.lan

# Sync to local clock if no servers are available.
server 127.127.1.0
fudge 127.127.1.0 stratum 10

# By default, restrict access to the service.
restrict -4 default limited nomodify noquery nopeer notrap kod
restrict -6 default limited nomodify noquery nopeer notrap kod

# Allow localhost to query the service, but nothing else.
restrict -4 127.0.0.1 limited nomodify nopeer notrap kod
restrict -6 ::1 limited nomodify nopeer notrap kod

# Allow local networks to sync with us.
# Edit the network address and mask below, and uncomment.
# restrict 192.168.1.0 mask 255.255.255.0 limited nomodify nopeer notrap kod

# Where to store the drift calculation.
driftfile /var/db/ntpd/drift

# Stats should be written here.
statsdir /var/db/ntpd/stats

# PID file location.
pidfile /run/ntpd.pid

# Disable the ntpdc -c monlist command, which is insecure and can be used
# to cause a denial of service attack (CVE-2013-5211).
disable monitor