# This source code is released into the public domain.
#
# The chrony.allow file is a list of "allow <prefix>", one per line,
# no traiing semicolon.  chrony doesn't have a simple way to reload
# its configuration file, so we just restart it.  A better way might
# be to use "chronyc allow" to update it on the fly.

CHRONY_FILE="/usr/local/etc/chrony.allow"
CHRONY_TEMP="${CHRONY_FILE}.ldaptmp"

if [ ! -f "$CHRONY_FILE" ]; then
	exit 0
fi

awk <"$NETWORKS_FILE" >"$CHRONY_TEMP" '{ print "allow " $1 }'

if cmp -s "$CHRONY_TEMP" "$CHRONY_FILE"; then
	rm "$CHRONY_TEMP"
	exit 0
fi

printf '%s updated:\n\n' "$CHRONY_FILE"
diff "$CHRONY_FILE" "$CHRONY_TEMP"
printf '\n'

mv "$CHRONY_TEMP" "$CHRONY_FILE" 
/usr/local/etc/rc.d/chronyd restart