#

# nts
nts enable
nts cert /etc/letsencrypt/live/kong.rellim.com/fullchain.pem
nts key /etc/letsencrypt/live/kong.rellim.com/privkey.pem


# -1 = no mem lock, 128 = lock 
#rlimit memlock -1
rlimit memlock 128

# test the gpsd driver
# refclock gpsd unit 0 refid GPSd

# PTP -- uses PTP time scale
# refclock shm unit 2 refid PTP flag4 1 minpoll 3 maxpoll 3 prefer
refclock shm unit 2 refid PTP flag4 1 minpoll 3 maxpoll 3 noselect

# for PPS and gpsd
#server 127.127.28.1 prefer maxpoll 4
#fudge 127.127.28.1 time1 -0.001860 refid GPS1
#fudge 127.127.28.1 time1 0 refid PPS
refclock shm unit 1 minpoll 3 maxpoll 3 refid PPS flag4 1

# Sanjeev Gupta <ghane0@gmail.com>
server ntpmon.dcs1.biz nts

# Mike Simpson <mikie.simpson@gmail.com>
server khronos.mikieboy.net nts

# Netnod
# server -4 zoo.weinigel.se:4126 maxpoll 2
server -4 zoo.weinigel.se:4446 nts maxpoll 5
# server -4 zoo.weinigel.se:4447 nts maxpoll 5

# Redhat, chrony
server -4 nts-test.strangled.net:443 nts maxpoll 2

# Univ Ostfalia
server nts3-e.ostfalia.de:443 nts noval
# server nts3-e.ostfalia.de:443 nts

# Watson Ladd <watson@cloudflare.com>
server time.cloudflare.com:1234 nts

server ntp1.glypnod.com nts

# server 204.17.205.8 maxpoll 5 # spidey
server spidey.rellim.com nts maxpoll 5 iburst  # spidey
server 204.17.205.16 maxpoll 5 iburst # pi
server 204.17.205.17 maxpoll 5 iburst # pi2
server -4 pi3.rellim.com nts maxpoll 5 iburst  # pi3
# server -4 pi3.rellim.com nts maxpoll 5 ca /tmp/cert.pem  # pi3
#server -4 pi3.rellim.com nts maxpoll 5 ca /tmp/chain.pem  # pi3
#server -4 pi3.rellim.com nts maxpoll 5 ca /tmp/fullchain.pem  # pi3
# server -4 pi3.rellim.com nts maxpoll 5 ca /tmp/ISRG_Root_X1.pem  # pi3
# server -4 pi3.rellim.com nts maxpoll 5 ca /tmp/letsencryptauthorityx3.pem
#server -4 pi3.rellim.com nts maxpoll 5 ca /tmp/lets-encrypt-x3-cross-signed.pem
#server -4 pi3.rellim.com nts maxpoll 5 ca /tmp  # pi3
# server pi3.rellim.com nts -6 nts maxpoll 5 # pi3
#server [2001:470:e815::23] maxpoll 5 # pi3
# server [2001:470:e815::23] maxpoll 5 # pi3
server [2001:470:e815::24] maxpoll 5 -burst # pi4

#server 204.123.2.5 # clepsydra.dec.com.  
server 204.17.205.1  maxpoll 5 # catbert
#server 204.17.205.27 # kong
server 204.17.205.30 # backup
# server 204.17.205.7 # darth, now a VM


driftfile /var/lib/ntp/ntp.drift
logfile /var/log/ntp.log
logconfig =syncall +clockall +peerall +sysall

# Enable this if you want statistics to be logged.
statsdir /var/log/ntpstats/

statistics loopstats peerstats clockstats protostats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
filegen protostats file protostats type day enable

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default nomodify nopeer noquery
restrict -6 default kod nomodify nopeer noquery limited

# Trust ourselves.  :-)
restrict 127.0.0.1 mask 255.255.255.0
restrict -6 ::1
# bay area internet
#restrict 209.128.89.0 mask 255.255.255.0
# bendtel
restrict 66.39.168.0 mask 255.255.255.0
# local
restrict 10.168.0.0 mask 255.255.0.0
# rellim
restrict 204.17.205.0 mask 255.255.255.0
# aplatform
restrict 204.29.139.0 mask 255.255.255.0
# esr - 2001:470:e34c:2:56a0:50ff:febb:62d/64
restrict 2001:470:e34c:2:: mask ffff:ffff:ffff:ffff::
restrict 71.162.243.5

# dead June 2016
#server 128.138.140.44 # utcnist.colorado.edu.
server time-nw.nist.gov iburst
# dead May 2016
#server 140.142.16.34  #bigben.cac.washington.edu.

# for gpsd
#server 127.127.28.0 maxpoll 4
#fudge 127.127.28.0 time1 -0.120  refid GPS
# 17Oct16, 0.1164 -> 0.100
#  2Nov16, 0.100 -> 0.90
refclock shm unit 0 maxpoll 4 time1 -0.0900  refid GPS flag4 1 noselect

refclock shm unit 2 maxpoll 4 time1 0  refid PTP noselect

leapfile /var/lib/ntp/leap-seconds.list