don't ask chrony to drop privs, it needs libpcap
This commit is contained in:
@@ -107,6 +107,7 @@ rec {
|
|||||||
};
|
};
|
||||||
|
|
||||||
services.ntp = svc.ntp.build {
|
services.ntp = svc.ntp.build {
|
||||||
|
user = "root";
|
||||||
pools = {
|
pools = {
|
||||||
"pool.ntp.org" = [ "iburst" ];
|
"pool.ntp.org" = [ "iburst" ];
|
||||||
};
|
};
|
||||||
|
@@ -14,7 +14,7 @@ let
|
|||||||
(mapAttrsToList (name: opts: "server ${name} ${concatStringsSep "" opts}") p.servers)
|
(mapAttrsToList (name: opts: "server ${name} ${concatStringsSep "" opts}") p.servers)
|
||||||
++ (mapAttrsToList (name: opts: "pool ${name} ${concatStringsSep "" opts}") p.pools)
|
++ (mapAttrsToList (name: opts: "pool ${name} ${concatStringsSep "" opts}") p.pools)
|
||||||
++ (mapAttrsToList (name: opts: "peer ${name} ${concatStringsSep "" opts}") p.peers)
|
++ (mapAttrsToList (name: opts: "peer ${name} ${concatStringsSep "" opts}") p.peers)
|
||||||
++ lib.optional (p.user != null) "user ${p.user}"
|
++ lib.optional (p.user != "root") "user ${p.user}"
|
||||||
++ (lib.optional (
|
++ (lib.optional (
|
||||||
p.makestep != null
|
p.makestep != null
|
||||||
) "makestep ${toString p.makestep.threshold} ${toString p.makestep.limit}")
|
) "makestep ${toString p.makestep.threshold} ${toString p.makestep.limit}")
|
||||||
|
Reference in New Issue
Block a user