Set per-machine timezones and enable NTP

control and ns2 use UTC+3 (Etc/GMT-3), ns1 uses UTC+1 (Etc/GMT-1) —
fixed offsets, no DST. Make systemd-timesyncd explicit on all three.

machines/control/configuration.nix

@@ -3,5 +3,6 @@
 
   ];
 
-  # New machine!
+  time.timeZone = "Etc/GMT-3"; # UTC+3 (fixed offset, no DST)
+  services.timesyncd.enable = true;
 }

machines/ns1/configuration.nix

@@ -7,6 +7,9 @@ in
     ../../modules/dns/authoritative.nix
   ];
 
+  time.timeZone = "Etc/GMT-1"; # UTC+1 (fixed offset, no DST)
+  services.timesyncd.enable = true;
+
   # ns1 = primary (master): holds each master zone file, notifies ns2 and
   # allows it to pull the zone via AXFR/IXFR.
   services.knot.settings.zone = map (d: {

machines/ns2/configuration.nix

@@ -7,6 +7,9 @@ in
     ../../modules/dns/authoritative.nix
   ];
 
+  time.timeZone = "Etc/GMT-3"; # UTC+3 (fixed offset, no DST)
+  services.timesyncd.enable = true;
+
   # ns2 = secondary (slave): pulls every zone from ns1 and accepts its NOTIFY.
   services.knot.settings.zone = map (d: {
     domain = d;