Configure local NTP server

Author: lpsinger

inventory.yml

@@ -16,3 +16,6 @@ clients:
       kafka_topic: green
     "10.0.42.6":
       kafka_topic: blue
+ntpd:
+  hosts:
+    "10.0.42.1":

playbooks/proxy.yml

@@ -30,20 +30,44 @@
         - no_proxy
         - NO_PROXY
 
-    - name: Set up DNS
-      ansible.builtin.copy:
+    - name: Install Chrony on all hosts
+      ansible.builtin.apt:
+        name: chrony
+
+- name: Configure one machine as an isolated NTP server
+  hosts: ntpd
+  become: true
+  tasks:
+    - ansible.builtin.copy:
+        content: |
+          allow 10.0.42.0/16
+        dest: /etc/chrony/conf.d/local.conf
+      register: restart_needed
+
+    - ansible.builtin.copy:
         content: |
-          nameserver 10.0.0.1
-        dest: /etc/resolv.conf
+          local
+          server 10.0.0.1
+        dest: /etc/chrony/sources.d/gateway.sources
+      register: restart_needed
 
-    - name: Create /etc/systemd/timesyncd.conf.d directory
-      ansible.builtin.file:
-        path: /etc/systemd/timesyncd.conf.d
-        state: directory
+    - ansible.builtin.systemd_service:
+        name: chrony.service
+        state: restarted
+      when: restart_needed.changed
 
-    - name: Set up NTP
-      ansible.builtin.copy:
+- name: Configure all other machines to get their time from the isolated NTP server
+  hosts: all:!ntpd
+  become: true
+  tasks:
+
+    - ansible.builtin.copy:
         content: |
-          [Time]
-          NTP=10.0.0.1
-        dest: /etc/systemd/timesyncd.conf.d/proxy.conf
+          server {{groups.ntpd[0]}} iburst
+        dest: /etc/chrony/sources.d/local.sources
+      register: restart_needed
+
+    - ansible.builtin.systemd_service:
+        name: chrony.service
+        state: restarted
+      when: restart_needed.changed