2 files changed, 18 insertions, 12 deletions

diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix
index 6925445b..b415bcb8 100644
--- a/hosts/surtr/default.nix
+++ b/hosts/surtr/default.nix
@@ -110,15 +110,17 @@ with lib;
     services.timesyncd.enable = false;
     services.chrony = {
       enable = true;
+      enableNTS = true;
       servers = [];
       extraConfig = ''
         pool time.cloudflare.com iburst nts
-        pool nts.ntp.se iburst nts
-        server nts.sth1.ntp.se iburst nts
-        server nts.sth2.ntp.se iburst nts
-        server ptbtime1.ptb.de iburst nts
-        server ptbtime2.ptb.de iburst nts
-        server ptbtime3.ptb.de iburst nts
+        pool nts.netnod.se prefer iburst nts
+        server ptbtime1.ptb.de prefer iburst nts
+        server ptbtime2.ptb.de prefer iburst nts
+        server ptbtime3.ptb.de prefer iburst nts
+
+        authselectmode require
+        minsources 3
 
         refclock PHC /dev/ptp_kvm poll 2 dpoll -2 offset 0 stratum 3
 
diff --git a/hosts/vidhar/default.nix b/hosts/vidhar/default.nix
index b0277c14..c24d9591 100644
--- a/hosts/vidhar/default.nix
+++ b/hosts/vidhar/default.nix
@@ -59,18 +59,22 @@ with lib;
     services.timesyncd.enable = false;
     services.chrony = {
       enable = true;
+      enableNTS = true;
       servers = [];
       extraConfig = ''
         allow 10.141.1.0/24
         local
 
         pool time.cloudflare.com iburst nts
-        pool nts.ntp.se iburst nts
-        server nts.sth1.ntp.se iburst nts
-        server nts.sth2.ntp.se iburst nts
-        server ptbtime1.ptb.de iburst nts
-        server ptbtime2.ptb.de iburst nts
-        server ptbtime3.ptb.de iburst nts
+        pool nts.netnod.se prefer iburst nts
+        server ptbtime1.ptb.de prefer iburst nts
+        server ptbtime2.ptb.de prefer iburst nts
+        server ptbtime3.ptb.de prefer iburst nts
+
+        authselectmode require
+        minsources 3
+
+        nocerttimecheck 1
 
         leapsectz right/UTC