# {{ ansible_managed }}
# Managed by Ansible - linux-baseline role
# Local edits will be overwritten.

# Primary NTP source: mk-labs internal NTP server (sundial)
server {{ baseline_ntp_server }} iburst prefer

# Fallback: public NTP pool
pool {{ baseline_ntp_fallback_pool }} iburst maxsources 2

driftfile /var/lib/chrony/chrony.drift

# Step the clock if the adjustment is >1s on the first 3 corrections
makestep 1.0 3

# Sync RTC from system clock
rtcsync

# Allow chronyd to use the keyfile for hardware refclock
{% if ansible_os_family == "Debian" %}
keyfile /etc/chrony/chrony.keys
{% else %}
keyfile /etc/chrony.keys
{% endif %}

# Log selective events
logdir /var/log/chrony
log measurements statistics tracking