---

{{ if eq .Vars.ubtu24cis_time_sync_tool "chrony" }}
  {{ if .Vars.ubtu24cis_level_1 }}
    {{ if .Vars.ubtu24cis_rule_2_3_3_1 }}
file:
  chrony_pool:
    title: 2.3.3.1 | Ensure chrony is configured with authorized timeserver | timeserver pool
    path: /etc/chrony/sources.d/pool.source
    exists: true
    contents:
    {{- range .Vars.ubtu24cis_time_pool }}
    - '/^pool {{ .name }} {{ .options }}/'
    {{ end }}
    meta:
      server: 1
      workstation: 1
      CIS_ID: 2.3.3.1
      CISv8:
      - 8.4
      CISv8_IG1: false
      CISv8_IG2: true
      CISv8_IG3: true
      NIST800-53R5:
      - AU-3
      - AU-12
  chrony_timeservers:
    title: 2.3.3.1 | Ensure chrony is configured with authorized timeserver | timeserver servers
    path: /etc/chrony/sources.d/server.source
    exists: true
    contents:
    {{- range .Vars.ubtu24cis_time_servers }}
    - '/^server {{ .name }} {{ .options }}/'
    {{ end }}
    meta:
      server: 1
      workstation: 1
      CIS_ID: 2.3.3.1
      CISv8:
      - 8.4
      CISv8_IG1: false
      CISv8_IG2: true
      CISv8_IG3: true
      NIST800-53R5:
      - AU-3
      - AU-12
    {{ end }}
  {{ end }}
{{ end }}