{% if ansible_virtualization_role == "guest" %}
tinker panic 0
{% endif %}
driftfile /var/lib/ntp/drift
restrict default kod nomodify notrap nopeer mssntp
restrict -6 default kod nomodify notrap nopeer mssntp
restrict 127.0.0.1
restrict -6 ::1
{% for server in ntp_servers %}
server {{ server }} iburst prefer
restrict {{ server }} mask 255.255.255.255 nomodify notrap nopeer noquery
{% endfor %}
includefile /etc/ntp/crypto/pw
keys /etc/ntp/keys
{% if ntp_samba_signd.stat.exists %}
ntpsigndsocket /var/lib/samba/ntp_signd/
{% endif %}