dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

chrony: Add role/PB for chrony

Browse Source 
I continually struggle with machines' (physical and virtual, even the
Roku devices!) clocks getting out of sync.  I have been putting off
fixing this because I wanted to set up a Windows-compatible NTP server
(i.e. on the domain controllers, with Kerberos signing), but there's
really no reason to wait for that to fix the clocks on all the
non-Windows machines, especially since there are exactly 0 Windows
machines on the network right now.

The *chrony* role and corresponding `chrony.yml` playbook are generic,
configured via the `chrony_pools`, `chrony_servers`, and `chrony_allow`
variables.  The values for these variables will configure the firewall
to act as an NTP server, synchronizing with the NTP pool on the
Internet, while all other machines will synchronize with it.  This
allows machines on networks without Internet access to keep their clocks
in sync.
This commit is contained in:
Dustin
2024-01-09 18:13:42 -06:00
parent 4ba5f2ced0
commit c300dc1b6c
8 changed files with 125 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/chrony/handlers/main.yml Normal file
View File

@@ -0,0 +1,4 @@
- name: restart chrony
service:
name: chronyd
state: restarted