1 SHA256 b1gS3cr3tKey123!
2 SHA256 Ch4v&S&cr3t4ch4v3?

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (https://www.pool.ntp.org/join.html).
cmdallow 127.0.0.1
local stratum 2
#pool pool.ntp.org iburst
server a.st1.ntp.br iburst nts
server b.st1.ntp.br iburst nts
server c.st1.ntp.br iburst nts
server d.st1.ntp.br iburst nts

# Record the rate at which the system clock gains/losses time.
driftfile /var/lib/chrony/drift

# Allow the system clock to be stepped in the first three updates
# if its offset is larger than 1 second.
makestep 0.1 3

# Enable kernel synchronization of the real-time clock (RTC).
rtcsync
#sourcedir /run/chrony-dhcp
#sourcedir /etc/chrony/sources.d

# Enable hardware timestamping on all interfaces that support it.
#hwtimestamp *

# Increase the minimum number of selectable sources required to adjust
# the system clock.
#minsources 2

# Allow NTP client access from local network.
#allow 192.168.0.0/16

# Serve time even if not synchronized to a time source.
#local stratum 10

# Require authentication (nts or key option) for all NTP sources.
#authselectmode require

# Specify file containing keys for NTP authentication.
keyfile /etc/chrony.keys

# Save NTS keys and cookies.
ntsdumpdir /var/lib/chrony

# Insert/delete leap seconds by slewing instead of stepping.
leapsecmode step
leapsectz right/UTC

# Set the TAI-UTC offset of the system clock.
#leapseclist /usr/share/zoneinfo/leap-seconds.list

# Specify directory for log files.
logdir /var/log/chrony

# Select which information is logged.
log measurements statistics tracking

# Erro máximo tolerado em ppm em relação aos servidores
maxupdateskew 10

[Unit]
Description=Chrony NTP/NTS
After=syslog.target ntpdate.service
Conflicts=ntpd.service

[Service]
Type=forking
ExecStart=/opt/chrony/sbin/chronyd -f /etc/chrony.conf -u chrony // $OPTIONS
ExecStop=/opt/chrony/sbin/chronyd

[Install]
WantedBy=multi-user.target
Alias=chrony.service