feat(deck): Enable SSL/TLS secured NTP and DNS by default. This is a computer you'd use on a public network after all.

This commit is contained in:
Kyle Gospodnetich 2023-07-25 22:11:27 -07:00
parent db206e9fe5
commit b0c77432a6
2 changed files with 23 additions and 0 deletions

View File

@ -0,0 +1,18 @@
server time.cloudflare.com iburst nts
server ntppool1.time.nl iburst nts
server nts.netnod.se iburst nts
server ptbtime1.ptb.de iburst nts
minsources 2
authselectmode require
driftfile /var/lib/chrony/drift
ntsdumpdir /var/lib/chrony
leapsectz right/UTC
makestep 1.0 3
rtconutc
rtcsync
cmdport 0

View File

@ -0,0 +1,5 @@
[Resolve]
DNS=1.1.1.1 9.9.9.9
DNSOverTLS=yes
DNSSEC=yes
FallbackDNS=1.0.0.1 149.112.112.112