# /etc/chrony/chrony.conf : chrony conf. file for cantal
#
# Last edition : 2025-07-06
# Last editor : @Campanu
#

# General
bindaddress 0.0.0.0
bindaddress 2a01:e0a:4d5:3c20::101b
allow 0/0
allow ::/0

local stratum 2
makestep 1.0 3
#leapsectz right/UTC

cmdport 0

# Paths
leapseclist /usr/share/zoneinfo/leap-seconds.list
driftfile /var/lib/chrony/chrony.drift

# Logs
logdir /var/log/chrony
log tracking measurements statistics
clientloglimit 1048576

## Client logging activated for tests
#noclientlog

# Rate limits
ratelimit interval 2 burst 4 leak 2 
ntsratelimit interval 2 burst 4 leak 2

# NTS
ntsntpserver ntp2.luc-geo.fr
ntsserverkey /path/to/privkey.pem
ntsservercert /path/to/fullchain.crt
ntsdumpdir /var/lib/chrony

# Synchronization servers

## Stratum 1
server ntp0.fau.de nts iburst
server ntp0.ipv6.fau.de nts iburst prefer
server ntp3.fau.de nts iburst
server ntp3.ipv6.fau.de nts iburst prefer
server ptbtime1.ptb.de nts iburst
server ptbtime2.ptb.de nts iburst
server ptbtime3.ptb.de nts iburst
server ptbtime4.ptb.de nts iburst

## Stratum 3 (fallback)
server time.cloudflare.com nts iburst