shell-things/etc/chrony/conf.d/allow-yggdrasil.conf

# https://yggdrasil-network.github.io/

# Yggdrasil should protect from spoofing so this should be OK
# ufw allow from 0200::/7 to any port 123 proto udp
allow 0200::/7
chrony: cut chrony.d/ into conf.d/ and sources.d/ I hope these are wider defaults than just Debian and allow me to not conflit with package manager, but regardless having a separate sources.d/ looks like a good idea for being able to `chronyc reload sources` 2021-01-29 11:56:38 +01:00			`# https://yggdrasil-network.github.io/`

			`# Yggdrasil should protect from spoofing so this should be OK`
			`# ufw allow from 0200::/7 to any port 123 proto udp`
			`allow 0200::/7`